Security auditing - Windows 10 | Microsoft Learn

Describe

windows audit The file system audit policy in Windows allows to monitor all access events to specific files and folders on a disk. An administrator can enable the audit policy to identify file and folder creation, read, modification, and deletion events on the NTFS file system..

windows spotlight  Windows auditing is an important component of Active Directory security and helps to monitor network activity. A Windows audit policy defines what type of events you want to keep track of in a Windows environment.

custom windows  You can record and store security audit events for Windows 10 and Windows Server 2016 to track key system and network activities, monitor potentially harmful behaviors, and mitigate risks.