Ensure No Auditing for 'Audit Policy: Detailed Tracking: DPAPI Activity'
|ID: oval:org.secpod.oval:def:22987||Date: (C)2015-01-07 (M)2017-09-27|
|Class: COMPLIANCE||Family: windows|
The Detailed Tracking audit category determines whether to audit detailed tracking information for events such as program activation, process exit, handle duplication, and indirect object access. This setting deals with the DPAPI Activity.
|Microsoft Windows Server 2012 R2|