Windows Logs: Movement and Deletion RRS feed

  • Question

  • Hey guys - 
    What auditing selection needs to be turned on to capture when someone moves a file.  For example, users have their own network share they can work off of.  If they were to move a file from that network share to let's say the local drive, what auditing aspect would need to be turned on to log that event?

    Monday, August 17, 2020 1:10 PM