Security auditing - Windows 10 | Microsoft Learn

windows audit The file system audit policy in Windows allows to monitor all access events to specific files and folders on a disk. An administrator can enable the audit policy to identify file and folder creation, read, modification, and deletion events on the NTFS file system..

download-windows-10-iso  You can record and store security audit events for Windows 10 and Windows Server 2016 to track key system and network activities, monitor potentially harmful behaviors, and mitigate risks.

windows-insider  Windows auditing is the process of tracking, analyzing, and understanding events that take place on Windows-based computer systems.