Practical 11: System Hacking using auditpol

===== SOURCE: Practical 11 System Hacking using auditpol.pdf =====

Get commands
Auditpol /?




Get audit status of categories
Auditpol /get /category:*




Enable audit to success
Audit /set /subcategory:”Process Creation” /success:enable




verify
To get the logs
Open notepad
Get systemname
Open eventveiwer

LAB SAFETY: Perform security testing only on systems, accounts, and networks you own or have explicit permission to test. Use isolated training targets and follow instructor directions.