Event ID for disabling event logs Expand / Collapse
Author
Message
Posted 3/10/2016 2:38:22 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 3/10/2016 2:37:05 PM
Posts: 1, Visits: 1
Hi! Is there any event ID to find out when was particular log was disabled / re-enabled?

Thank you,
Post #5170
Posted 3/28/2016 9:15:55 AM
Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Moderators
Last Login: 11/14/2013 3:17:47 PM
Posts: 237, Visits: 0
Yes, take a look at the Audit Policy Changed event 4719 https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=4719
Post #5174
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 10:01am