Tag: Audit Deleted Files

How to audit the windows Event Log for deleted files using event filter in xPath form

Purpose: The purpose of this article is to show how to audit the Event logs for File Delete operations. We will use XPath to filter for the Delete event inside the Event Data level of the XML detail. Solution: Step1: Enable file auditing from Group Policy Object.  We will refer to it as GPO from […]

Read More