Home > Event Id > Event Id 4663

Event Id 4663

Contents

As an example, the following filter looks for file access events by a user with sAMAccountName pparker: