Windows Server Advanced Security Auditing: Detailed Tracking
In this video you’ll learn about the Detailed Tracking category of the advanced security auditing policies. These policies allow you to track process startup and shutdown as well as events such as USB device connection. This information is part of our series on advanced audit policies and is based on the advice at: https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/advanced-security-audit-policy-settings
Other videos in this series are in this playlist: https://www.youtube.com/playlist?list=PLjt5SKzX1iI8K0USEn77ux73f6aeaH_UG
windows server
