Audit id 560 operation

  • Thread starter Thread starter Understand audit xp
  • Start date Start date
U

Understand audit xp

Hi!

In event view(security log), if I open or delete or modify or close a
file(ex. test.txt) , all event appear with event id 560.

I don't understant, from event view(security log),
when file test.txt is deleted or open or modify or close.


Thanks!
 
Back
Top