Change Auditor does not parse or scrape the Windows Event logs. The CA agent injects dlls and hooks into the processes it is licensed to audit.
For example, when an agent is installed on a DC and the Change Auditor for AD License is applied, the agent will inject hooks into the LSASS process to audit changes made to AD objects.
© ALL RIGHTS RESERVED. Feedback Conditions d’utilisation Confidentialité Cookie Preference Center