Looks like Windows 10 has introduced some new Security event ID's as well as modified the content on some existing messages with more info (4688).
This page seems to have the best breakdown of the new and modified events
In short these are the new ones:
4798/4799 - write operations only used to be audited, now read and query are audited along with write.
4826 - Boot Configuration Database