Skip to content

Ops reference

Ports, Event IDs, M365 SKUs

Searchable desk reference for the ticket in front of you.

Stays in this tab.

All desks

Bookmarkable. Local. Faster than hunting Microsoft Learn mid-call.

Ports

22 · SSH

25 · SMTP

53 · DNS

80 · HTTP

110 · POP3

123 · NTP

143 · IMAP

389 · LDAP

443 · HTTPS

445 · SMB

465 · SMTPS

587 · Submission

636 · LDAPS

993 · IMAPS

3389 · RDP

5432 · Postgres

5985 · WinRM

5986 · WinRM TLS

6443 · K8s API

Event IDs

4624 · Successful logon

4625 · Failed logon

4648 · Explicit credentials

4672 · Special privileges

4688 · Process created

4720 · Account created

4740 · Account locked

4768 · Kerberos TGT

4769 · Kerberos service ticket

7045 · Service installed

M365 SKUs

M365 Business Basic — Web apps + Exchange. No desktop Office.

M365 Business Standard — Desktop Office + Exchange + Teams.

M365 Business Premium — Standard + Intune + Defender for Business.

M365 E3 — Enterprise apps + compliance. No E5 security stack.

M365 E5 — E3 plus advanced audit, Defender, voice options.

Entra ID P1 — Conditional access, self-service reset.

Entra ID P2 — P1 plus Identity Protection and PIM.

All desks

Need the stack held after the number.

Built by TUCE. This tool stays in the tab. The commercial door is still the $999 assessment.

Start the $999 assessment