auth log: Add windows event codes