the changes he made. Another caveat when auditing object access is that one user action can result in many events in the Security Log. For example, selecting a text file with Windows Explorer and double-clicking the file to view it in WordPad produces more than 20 events when auditing all ...