If your PC computer is running Windows 11 22H2, then you already have audit mode enabled. Otherwise, open the Registry Editor, and head to the Computer\\HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft \\Windows NT\\CurrentVersion\\Image File Execution Options\\LSASS.exe key. Double-click the "AuditLevel" value, set "Value data" to "8," and click "OK."