Detection rules › By eventMicrosoft-Windows-Security-Auditing event 53821 detection rule reference this event. View event page.Elastic (1)Multiple Vault Web Credentials Read T1003, T1555, T1555.004