Hello,
I want to know which file or folder was deleted by whom.
The problem is that there is no file or folder name in ID 4660 and I need to extract the file or folder name from ID 4663, but how do I link these together? How do I know which ID 4660 is related to which ID 4663? What field is...
audit log
data recovery
error resolution
event correlation
event id
file deletion
file management
file system
file tracking
folder deletion
folder tracking
id 4660
id 4663
james
jason
security audit
user activity
user permissions
windows logs
windows security
