Configure Audit Logon Events Policy:

Below Event IDs are registered when User login with Microsoft Account and enter wrong password. Windows Failed Logon Event (Logon Type 2): Below Event ID gets register when User tries to run application / executable using ................
................