
This largely depends on what you have enabled for Windows File Auditing - I don’t have the links to hand but we recently ran a Masterclass on it. You need to set a group policy for the machine you monitor with auditing enabled, make sure to run a gpupdate on that machine, and the enable all the audit settings on the folder you monitor.
2 comments