Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Administrators can use this advanced audit policy setting to select only the behaviours that they want to monitor. Different events will be generated by turning on different sub-categories.  The list of event ids and their details can be found here https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/advanced-security-audit-policy-settings. However, the built in Audit Policies audit policies and the captured event ids that come with advanced auditing options are given below.

after After finalizing the default advanced policies following table of default advanced policy will be added here.

https://confluence.intersectalliance.com/pages/viewpage.action?spaceKey=SI&title=Advanced+Auditing#AdvancedAuditing-Summaryofalladvancedauditpolicies

...