<QueryList>
  <Query Id="0" Path="Security">
    <Select Path="Security">
      *[System[(EventID='4624')]]
      and
      *[EventData[Data[@Name='LogonType'] and (Data='2' or Data='10')]]
    </Select>
  </Query>
</QueryList>