Skip to content

Instantly share code, notes, and snippets.

@DavidHoenisch
Created January 24, 2023 16:41
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save DavidHoenisch/219d92c861482870fde2ac76c720ff48 to your computer and use it in GitHub Desktop.
Save DavidHoenisch/219d92c861482870fde2ac76c720ff48 to your computer and use it in GitHub Desktop.
All the logging for windows. Generated to what2log.com
auditpol /set /subcategory:"computer account management" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"computer account management" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"computer account management" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"audit policy change" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"logon" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"security group management" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"security group management" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"security group management" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"logoff" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"logon" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"MPSSVC Rule-Level Policy Change" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"MPSSVC Rule-Level Policy Change" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"MPSSVC Rule-Level Policy Change" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"MPSSVC Rule-Level Policy Change" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"MPSSVC Rule-Level Policy Change" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"Security State Change" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"security group management" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"security group management" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"Other Logon/Logoff Events" /Sucess:Enable /Failure:Enable
auditpol /set /subcategory:"Other Logon/Logoff Events" /Sucess:Enable /Failure:Enable
auditpol /set /subcategory:"Special Logon" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"MPSSVC Rule-Level Policy Change" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"MPSSVC Rule-Level Policy Change" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"MPSSVC Rule-Level Policy Change" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"MPSSVC Rule-Level Policy Change" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"Other Logon/Logoff Events" /Sucess:Enable /Failure:Enable
auditpol /set /subcategory:"Other Logon/Logoff Events" /Sucess:Enable /Failure:Enable
auditpol /set /subcategory:"Process Creation" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"Process Termination" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"MPSSVC Rule-Level Policy Change" /Success:Enable /Failure:Enable
auditpol /set /subcategory:"MPSSVC Rule-Level Policy Change" /Success:Enable /Failure:Enable
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment