| TABLE 1: Audit Category Names |
| Event Viewer |
User Manager |
| Logon/logoff |
Logon and logoff |
| Object access |
File and object access |
| Privilege use |
Use of user rights |
| Account management |
User and group management |
| Policy change |
Security policy changes |
| System event |
Restart, shutdown and system |
| Detailed tracking |
Process tracking |