Viewing Audit Information
Auditing events and information are stored and made available in the Event Viewer as part of the Security log. One challenge with the Security log is that it can get quite large. However, you can search for specific events if desired instead of browsing the log manually.
You can use the following steps to launch the Event Viewer, view the Security log, and filter the entries:
1. Click Start Administrative Tools Event Viewer. If prompted by UAC, click Continue.
2. Expand Windows Logs, and select Security. Your display will look similar to Figure 5-9. Note the number of events in your log. The figure shows that 90,388 events are in the log.
3. Double-click any of the entries to view the contents. Note the event ID ...
Get Microsoft® Windows® Security: Essentials now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
