Summary Auditing is more than just determining compliance to policy, scanning for vulnerabilities, or setting up the Windows Audit Policy. Auditing is all of these. Effectively auditing Windows systems requires systems administrators and separate audit staff, as well as the proper use of native and third-party tools. When done properly, auditing merges with monitoring, which is the subject of the next chapter. |