AuditDetailedTracking type | Wartiva GraphQL API

Detailed Tracking audit subcategories for process and application monitoring.

Fields

Field Name	Description
`processCreation` - `AuditPolicySetting!`	Audits when a process is created, including command line and parent process information.
`processTermination` - `AuditPolicySetting!`	Audits when a process terminates.
`dpapiActivity` - `AuditPolicySetting!`	Audits Data Protection API (DPAPI) operations for encrypting and decrypting data.
`rpcEvents` - `AuditPolicySetting!`	Audits Remote Procedure Call (RPC) events.
`plugAndPlayEvents` - `AuditPolicySetting!`	Audits Plug and Play device installation and configuration events.
`tokenRightAdjustedEvents` - `AuditPolicySetting!`	Audits when token privileges are adjusted or modified.

Used by

AuditPolicyWindows type: Windows-specific Advanced Audit Policy Configuration.

Example

{
  "processCreation": "SUCCESS",
  "processTermination": "SUCCESS",
  "dpapiActivity": "SUCCESS",
  "rpcEvents": "SUCCESS",
  "plugAndPlayEvents": "SUCCESS",
  "tokenRightAdjustedEvents": "SUCCESS"
}