That video was very helpful, thanks. By any chance can you demonstrate the "file read" auditing? I am having a very hard time finding a way to audit when a user actually opens a file because there is no way to accomplish this with regular windows file auditing, I can audit read permissions or read attributes but they show that permissions and attributes are being read on files which aren't actually opened.
↧