Which of the following Windows Event IDs helps monitor file sharing over the network?
Windows Security Event ID 5140, in the Audit File Share subcategory, is generated when a network share object is accessed. It records network-share access and can be used to monitor file sharing activity.
Community Discussion