Don't make your SOC blind to Active Directory attacks: 5 surprising behaviors of Windows audit policy | by Clément Notin [Tenable] | Tenable TechBlog | Medium
HOW TO CONFIGURE GRANULAR AUDIT POLICY ON A FILE SERVER MONITORED BY NETWRIX FILE SERVER CHANGE REPORTER
![Delegating the Administration of Windows Server 2008 Active Directory Domain Services | Microsoft Press Store Delegating the Administration of Windows Server 2008 Active Directory Domain Services | Microsoft Press Store](https://www.microsoftpressstore.com/content/images/chap9_9780735625150/elementLinks/httpatomoreillycomsourcemspimages563039.jpg)