Pau Lo

<div>
&gt;and Process Tracking<br />
<br />
is this what would capture loading apps like Microsoft Word.
</div>


>and Process Tracking

is this what would capture loading apps like Microsoft Word.

<div>
Correct, see full details here: <a href="https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/basic-audit-process-tracking" rel="ugc">https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/basic-audit-process-tracking</a>
</div>


Correct, see full details here: https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/basic-audit-process-tracking [https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/basic-audit-process-tracking]

<div>
Thank you. Out of interest can you suggest any articles on what events are logged in windows 7 enterprise by default? I appreciate organisations can tailor settings to their own requirements and policies but knowing what is logged by default would be very interesting to me.
</div>


Thank you. Out of interest can you suggest any articles on what events are logged in windows 7 enterprise by default? I appreciate organisations can tailor settings to their own requirements and policies but knowing what is logged by default would be very interesting to me.

<div>
By default, the security logs show some logon/logoff events. Nothing too exciting. Auditing requires more from your system, and has been off by default since forever (my memory doesn't go beyond Win2000 though)
</div>


By default, the security logs show some logon/logoff events. Nothing too exciting. Auditing requires more from your system, and has been off by default since forever (my memory doesn't go beyond Win2000 though)

<div>
<div class="content wysiwyg-content">
do any of the default event logs on windows 7 give any clues when certain applications are started/closed, e.g web browsers, or office software such as outlook, word, excel.<br />
<br />
And do any of the default event logs also capture times specific files were opened, e.g. a file on a desktop 123.docx (I am guessing this is an option but rarely enabled).
</div>
</div>


do any of the default event logs on windows 7 give any clues when certain applications are started/closed, e.g web browsers, or office software such as outlook, word, excel.

And do any of the default event logs also capture times specific files were opened, e.g. a file on a desktop 123.docx (I am guessing this is an option but rarely enabled).

windows event logs for launching applications or opening files.

Digital forensics encompasses the recovery and investigation of material found in digital devices, often in relation to computer crime. Digital forensics investigations have a variety of applications. The most common is to support or refute a hypothesis before criminal or civil (as part of the electronic discovery process) courts. The technical aspect of an investigation is divided into several sub-branches, relating to the type of digital devices involved; computer forensics, network forensics, forensic data analysis and mobile device forensics. The typical forensic process encompasses the seizure, forensic imaging (acquisition) and analysis of digital media and the production of a report into collected evidence.

Digital Forensics

This topic area includes legacy versions of Windows prior to Windows 2000: Windows 3/3.1, Windows 95 and Windows 98, plus any other Windows-related versions including Windows Mobile.

Windows OS

Windows 7 is an operating system from Microsoft. Features include multi-touch support, a redesigned Windows Shell with a new taskbar, referred to as the Superbar, a home networking system called HomeGroup, and performance improvements.