Windows 10 Security Auditing and Monitoring Reference

Microsoft has published a very useful reference (from a digital forensic point of view) by Andrei Miroshnikov.

Windows-10-Security-Auditing-and-Monitoring-reference-weare4n6

This document contains:
• Detailed technical descriptions for most of the advanced security audit policies that are included with Windows 10.
• Monitoring recommendations for security events to include in advanced security audit policies.
• Recommendations for Group Policy settings for advanced security audit policy for domain controllers, workstations, and member servers.

[su_button url=”https://www.microsoft.com/en-us/download/details.aspx?id=52630″ target=”blank” style=”flat” background=”#222348″ size=”7″ radius=”0″]Download[/su_button]

DISCLAIMER: THIS POST IS FOR INFORMATIONAL PURPOSES ONLY AND IS NOT TO BE CONSIDERED LEGAL ADVICE ON ANY SUBJECT MATTER. DIGITAL FORENSICS CORP. IS NOT A LAWFIRM AND DOES NOT PROVIDE LEGAL ADVICE OR SERVICES. By viewing posts, the reader understands there is no attorney-client relationship, the post should not be used as a substitute for legal advice from a licensed professional attorney, and readers are urged to consult their own legal counsel on any specific legal questions concerning a specific situation.