Am I correct in my suspicion that ADAudit Plus can't monitor ANY random event from the Windows security log?
I found only prepared reports for user logons, system time changing etc. that I don't need.
Is there a way to monitor an arbitrary event, i.e. 4657?