EventID 100 in the application log with the source of ScreenConnect contains connection information when an admin or user connects to a system with ScreenConnect. The details include the name of the user that made the connection and would be helpful to capture in SIEM.