Windows EventInformation
Windows Event ID 5615 – Security: Credential Manager Vault Access
Event ID 5615 logs when a user or process accesses the Windows Credential Manager vault to retrieve stored credentials, passwords, or certificates for authentication purposes.