Viewing Audit Information
Auditing events and information are stored and made available in the Event Viewer as part of the Security log. One challenge with the Security log is that it can get quite large. However, you can search for specific events if desired instead of browsing the log manually.
You can use the following steps to launch the Event Viewer, view the Security log, and filter the entries:
1. Click Start Administrative Tools Event Viewer. If prompted by UAC, click Continue.
2. Expand Windows Logs, and select Security. Your display will look similar to Figure 5-9. Note the number of events in your log. The figure shows that 90,388 events are in the log.
3. Double-click any of the entries to view the contents. Note the event ID ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access