As one of the main pillars of security, auditing is perhaps the least known and overlooked. When a system crashes, most people reboot, hoping the problem is then sorted. However, Windows can be configured to audit just about anything that happens on its watch. This includes security issues and performance. This gives you some idea of what went wrong, and in the case of audit events, it provides a warning that unauthorized activity is afoot.

At Computerworld.

[ Read more ]