ActiveDirectory Audit Useful commands WMI Windows monitoring Log analyses Sysmon (sysinternals) Base Configuration - Windows Server(security optimised) Windows Event log and Security Audit