This specific example shows a local computer account updating its password, which according to MS occurs every 30 days. I would like to drop event 4742 when the
Password last set field is populated, but retain all other instances of 4742 that would indicate other changes. How would I create a filter to do this?