Tag
Attackers disable security-sensitive audit policy subcategories on Windows systems to evade detection and impair forensic capabilities by preventing the logging of critical activities.