Also, you need to enable auditing on the NTFS side in order to dump to the .evt
↧
Also, you need to enable auditing on the NTFS side in order to dump to the .evt