go.mondoo.com/cnquery@v0.0.0-20231005093811-59568235f6ea/providers/os/resources/windows/testdata/auditpol.toml (about)

     1  [commands."auditpol /get /category:* /r"]
     2  stdout = """Machine Name,Policy Target,Subcategory,Subcategory GUID,Inclusion Setting,Exclusion Setting
     3  Test,System,Security System Extension,{0CCE9211-69AE-11D9-BED3-505054503030},No Auditing,
     4  Test,System,System Integrity,{0CCE9212-69AE-11D9-BED3-505054503030},Success and Failure,
     5  Test,System,IPsec Driver,{0CCE9213-69AE-11D9-BED3-505054503030},No Auditing,
     6  Test,System,Other System Events,{0CCE9214-69AE-11D9-BED3-505054503030},Success and Failure,
     7  Test,System,Security State Change,{0CCE9210-69AE-11D9-BED3-505054503030},Success,
     8  Test,System,Logon,{0CCE9215-69AE-11D9-BED3-505054503030},Success and Failure,
     9  Test,System,Logoff,{0CCE9216-69AE-11D9-BED3-505054503030},Success,
    10  Test,System,Account Lockout,{0CCE9217-69AE-11D9-BED3-505054503030},Success,
    11  Test,System,IPsec Main Mode,{0CCE9218-69AE-11D9-BED3-505054503030},No Auditing,
    12  Test,System,IPsec Quick Mode,{0CCE9219-69AE-11D9-BED3-505054503030},No Auditing,
    13  Test,System,IPsec Extended Mode,{0CCE921A-69AE-11D9-BED3-505054503030},No Auditing,
    14  Test,System,Special Logon,{0CCE921B-69AE-11D9-BED3-505054503030},Success,
    15  Test,System,Other Logon/Logoff Events,{0CCE921C-69AE-11D9-BED3-505054503030},No Auditing,
    16  Test,System,Network Policy Server,{0CCE9243-69AE-11D9-BED3-505054503030},Success and Failure,
    17  Test,System,User / Device Claims,{0CCE9247-69AE-11D9-BED3-505054503030},No Auditing,
    18  Test,System,Group Membership,{0CCE9249-69AE-11D9-BED3-505054503030},No Auditing,
    19  Test,System,File System,{0CCE921D-69AE-11D9-BED3-505054503030},No Auditing,
    20  Test,System,Registry,{0CCE921E-69AE-11D9-BED3-505054503030},No Auditing,
    21  Test,System,Kernel Object,{0CCE921F-69AE-11D9-BED3-505054503030},No Auditing,
    22  Test,System,SAM,{0CCE9220-69AE-11D9-BED3-505054503030},No Auditing,
    23  Test,System,Certification Services,{0CCE9221-69AE-11D9-BED3-505054503030},No Auditing,
    24  Test,System,Application Generated,{0CCE9222-69AE-11D9-BED3-505054503030},No Auditing,
    25  Test,System,Handle Manipulation,{0CCE9223-69AE-11D9-BED3-505054503030},No Auditing,
    26  Test,System,File Share,{0CCE9224-69AE-11D9-BED3-505054503030},No Auditing,
    27  Test,System,Filtering Platform Packet Drop,{0CCE9225-69AE-11D9-BED3-505054503030},No Auditing,
    28  Test,System,Filtering Platform Connection,{0CCE9226-69AE-11D9-BED3-505054503030},No Auditing,
    29  Test,System,Other Object Access Events,{0CCE9227-69AE-11D9-BED3-505054503030},No Auditing,
    30  Test,System,Detailed File Share,{0CCE9244-69AE-11D9-BED3-505054503030},No Auditing,
    31  Test,System,Removable Storage,{0CCE9245-69AE-11D9-BED3-505054503030},No Auditing,
    32  Test,System,Central Policy Staging,{0CCE9246-69AE-11D9-BED3-505054503030},No Auditing,
    33  Test,System,Non Sensitive Privilege Use,{0CCE9229-69AE-11D9-BED3-505054503030},No Auditing,
    34  Test,System,Other Privilege Use Events,{0CCE922A-69AE-11D9-BED3-505054503030},No Auditing,
    35  Test,System,Sensitive Privilege Use,{0CCE9228-69AE-11D9-BED3-505054503030},No Auditing,
    36  Test,System,Process Creation,{0CCE922B-69AE-11D9-BED3-505054503030},No Auditing,
    37  Test,System,Process Termination,{0CCE922C-69AE-11D9-BED3-505054503030},No Auditing,
    38  Test,System,DPAPI Activity,{0CCE922D-69AE-11D9-BED3-505054503030},No Auditing,
    39  Test,System,RPC Events,{0CCE922E-69AE-11D9-BED3-505054503030},No Auditing,
    40  Test,System,Plug and Play Events,{0CCE9248-69AE-11D9-BED3-505054503030},No Auditing,
    41  Test,System,Token Right Adjusted Events,{0CCE924A-69AE-11D9-BED3-505054503030},No Auditing,
    42  Test,System,Audit Policy Change,{0CCE922F-69AE-11D9-BED3-505054503030},Success,
    43  Test,System,Authentication Policy Change,{0CCE9230-69AE-11D9-BED3-505054503030},Success,
    44  Test,System,Authorization Policy Change,{0CCE9231-69AE-11D9-BED3-505054503030},No Auditing,
    45  Test,System,MPSSVC Rule-Level Policy Change,{0CCE9232-69AE-11D9-BED3-505054503030},No Auditing,
    46  Test,System,Filtering Platform Policy Change,{0CCE9233-69AE-11D9-BED3-505054503030},No Auditing,
    47  Test,System,Other Policy Change Events,{0CCE9234-69AE-11D9-BED3-505054503030},No Auditing,
    48  Test,System,Computer Account Management,{0CCE9236-69AE-11D9-BED3-505054503030},Success,
    49  Test,System,Security Group Management,{0CCE9237-69AE-11D9-BED3-505054503030},Success,
    50  Test,System,Distribution Group Management,{0CCE9238-69AE-11D9-BED3-505054503030},No Auditing,
    51  Test,System,Application Group Management,{0CCE9239-69AE-11D9-BED3-505054503030},No Auditing,
    52  Test,System,Other Account Management Events,{0CCE923A-69AE-11D9-BED3-505054503030},No Auditing,
    53  Test,System,User Account Management,{0CCE9235-69AE-11D9-BED3-505054503030},Success,
    54  Test,System,Directory Service Access,{0CCE923B-69AE-11D9-BED3-505054503030},Success,
    55  Test,System,Directory Service Changes,{0CCE923C-69AE-11D9-BED3-505054503030},No Auditing,
    56  Test,System,Directory Service Replication,{0CCE923D-69AE-11D9-BED3-505054503030},No Auditing,
    57  Test,System,Detailed Directory Service Replication,{0CCE923E-69AE-11D9-BED3-505054503030},No Auditing,
    58  Test,System,Kerberos Service Ticket Operations,{0CCE9240-69AE-11D9-BED3-505054503030},Success,
    59  Test,System,Other Account Logon Events,{0CCE9241-69AE-11D9-BED3-505054503030},No Auditing,
    60  Test,System,Kerberos Authentication Service,{0CCE9242-69AE-11D9-BED3-505054503030},Success,
    61  Test,System,Credential Validation,{0CCE923F-69AE-11D9-BED3-505054503030},Success,
    62  """