Logon Success and Failure Auditing Enabled

Summary

This document outlines how to run auditpol.exe to determine if logon success and failure auditing is enabled.

Detection String	Comparator	Result	Applicable OS
`auditpol.exe /get /subcategory:logon`	Contains	Success and Failure	Windows AD Controller