Windows Auditing

Check Description

This check determines whether auditing is enabled on the scanned computer. Microsoft® Windows® has an auditing feature that tracks and logs specific events on your system, such as successful and failed logon attempts. By monitoring your system's event log, you can help identify potential security issues and malicious activity.

Additional Resources

Chapter 3 - Audit Policy (Threats and Countermeasures Guide)

Windows Server 2003: Auditing Security Events Best Practices

©2002-2004 Microsoft Corporation. All rights reserved.