Chapter 8
Sample Events that Can be
Audited for an Account
n
Logon and logoff activity
n
Account modifications through account
management tools
n
Accesses to files and other objects (for
files, folders, and objects that are set up
to be audited)