Windows Server Advanced Security Auditing: Detailed Tracking
Channel: ITOpsTalk
Date: 2024-02-12

In this video you'll learn about the Detailed Tracking category of the advanced security auditing policies. These policies allow you to track process startup and shutdown as well as events such as USB device connection. This information is part of our series on advanced audit policies and is based on the advice at: https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/advanced-security-audit-policy-settings

Blog post discussing Advanced Audit Policies: https://techcommunity.microsoft.com/t5/itops-talk-blog/windows-server-advanced-auditing-policies/ba-p/4060459

Other videos in this series are in this playlist: https://www.youtube.com/playlist?list=PLjt5SKzX1iI8K0USEn77ux73f6aeaH_UG