Core concepts
Understand how FileAudit collects file access events, from Windows and cloud auditing to access types and database architecture.
Windows audit
Native Windows auditing mechanisms used by FileAudit
Cloud audit
Cloud audit mechanisms, supported providers, and collection behavior.
Permissions and properties snapshots
What a snapshot captures: object properties, NTFS permissions, statuses, and storage
Access types
Windows and cloud access types detected by FileAudit