I am working with active directory logs generated on a large network with hundreds of AD servers. I am having trouble finding examples of active directory event IDs in the logs for a couple of basic network events.
What active directory event IDs correspond to
A) a network resource like a shared file being read/deleted/modified by a specific hostname. For example is something like user1 access spreadsheet1.csv on shared folder z://server1/share1
B) a network server has been accessed by a specific user. For example user1 logged into finance-server