friendlymegalomaniac
New Member
- Joined
- Apr 27, 2018
- Messages
- 2
I meant just by default, with no changed settingsYes it's called 'Audit process tracking'. It can be set in group policy if you're running Windows 10 Pro or Enterprise.
secpol.msc > Security Settings > Local Policy > Audit Policy
These events will show up in the Security Log.