TABLE 11-1   WINDOWS NT EVENT ATTRIBUTES
Attribute	Description
Date	The date the event took place
Time	The time the event took place
Source	The software that generated the event. This can be either an element of Windows NT itself or a third-party application.
Type	This describes which of the five event types (described previously) this event belongs to.
Category	A classification of the event, based on information from the source. Many events do not have an associated category.
Event ID	This is a unique number that the source associates with the particular event.
User	The user name of the user whose process or action generated the event
Computer	The computer name the event took place on