Audits all types of changes, not just event logs, providing complete visibility into Who did What and When with 'before' and 'after' values.
Auditing of critical Windows Server changes including local users and groups, specific registry keys, scheduled tasks or Windows services.
User Activity Auditing:
Records dynamic screen activity, providing visibility into applications that do not produce event logs.
Scalable two-tiered storage (file-based + SQL database) holding consolidated audit data for 10 years or more.