Audit id 560 operation

  • Thread starter Understand audit xp
  • Start date
U

Understand audit xp

Hi!

In event view(security log), if I open or delete or modify or close a
file(ex. test.txt) , all event appear with event id 560.

I don't understant, from event view(security log),
when file test.txt is deleted or open or modify or close.


Thanks!
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Security Event 560 every 2 minutes 1
F-Prot triggers huge amounts of Security Audit Failures on Windows XP 4
Event ID 560 (SC_MANAGER OBJECT) 3
How to understand file audit output 1
Help!!! Audit Failure - Event ID 560 1
security audit failure 560 3
Audit object access - failure audit 0
Security Logs Fill with Event 560 when limited users log in 3

Top