SecurityFever
SecurityFever copied to clipboard
Keep getting exceptions
When I use the module on a Win10 workstation, I keep getting exceptions such as: "No audit policy found for category Logon/Logoff and subcategory Logon." My assumption was that "Get-SecurityActivity" helped me dump the Security event log entries related to the activities I specify. These event log entries exist, and I can manually dump them by their ID. What is the "audit policy" part supposed to do? Why wouldn't the function simply dump the event IDs? Or did I misunterstand the concept? I am currently updating my PS book and planned to integrate this module as a sample so any advice greatly appreciated!