日志安全中:
5140,5142,5143,5144,
| 5140 | A network share object was accessed |
| 5142 | A network share object was added. |
| 5143 | A network share object was modified |
| 5144 | A network share object was deleted. |
参考资料:
https://www.netsurion.com/articles/auditing-file-shares-windows-security-log