Event Log Query String for Interactive LogonType July 13, 2022 *[System[(EventID=4624)]] and *[EventData[Data[@Name='LogonType'] and (Data=2)]]