| WN22-AU-000130 | V2R1 | Windows Server 2022 must be configured to audit Detailed Tracking - Plug and Play Events successes. | |
| WN22-AU-000240 | V2R1 | Windows Server 2022 must be configured to audit Object Access - Removable Storage successes. | |
| WN22-AU-000250 | V2R1 | Windows Server 2022 must be configured to audit Object Access - Removable Storage failures. | |
| WN10-AU-000081 | V2R8 | Windows 10 must be configured to audit Object Access - File Share failures. | |
| WN10-AU-000082 | V2R8 | Windows 10 must be configured to audit Object Access - File Share successes. | |
| WN10-AU-000083 | V2R8 | Windows 10 must be configured to audit Object Access - Other Object Access Events successes. | |
| WN10-AU-000084 | V2R8 | Windows 10 must be configured to audit Object Access - Other Object Access Events failures. | |
| WN10-AU-000085 | V2R8 | The system must be configured to audit Object Access - Removable Storage failures. | |
| WN10-AU-000090 | V2R8 | The system must be configured to audit Object Access - Removable Storage successes. | |
| WN11-AU-000085 | V2R1 | The system must be configured to audit Object Access - Removable Storage failures. | |
| WN11-AU-000090 | V2R1 | The system must be configured to audit Object Access - Removable Storage successes. | |
| WN16-AU-000160 | V2R10 | Windows Server 2016 must be configured to audit Detailed Tracking - Plug and Play Events successes. | |
| WN16-AU-000290 | V2R10 | Windows Server 2016 must be configured to audit Object Access - Removable Storage successes. | |
| WN16-AU-000300 | V2R10 | Windows Server 2016 must be configured to audit Object Access - Removable Storage failures. | |
| WN19-AU-000130 | V2R8 | Windows Server 2019 must be configured to audit Detailed Tracking - Plug and Play Events successes. | |
| WN19-AU-000240 | V2R8 | Windows Server 2019 must be configured to audit Object Access - Removable Storage successes. | |
| WN19-AU-000250 | V2R8 | Windows Server 2019 must be configured to audit Object Access - Removable Storage failures. | |