日志安全中:
5140,5142,5143,5144,
5140 | A network share object was accessed |
5142 | A network share object was added. |
5143 | A network share object was modified |
5144 | A network share object was deleted. |
参考资料:
https://www.netsurion.com/articles/auditing-file-shares-windows-security-log