Use this file to discover all available pages before exploring further.
The new docs.trellix.com offers a modernized UI and AI-powered features like conversational searches. Content is currently available only in English. Other languages will be available in mid-October 2026. We hope you enjoy the new experience.
Press CTRL+K to open search
Enabling the module to send notifications about audit policy changes
You can use Event Streamer to be notified when changes are made to the audit policy (EventId 4719).
Use Audit Audit Policy Change to monitor the audit policy changes in a group policy.
Launch the local group policy editor (gpedit.msc).
Navigate to Computer Configuration > Windows Settings > Security Settings > Advanced Audit Policy Configuration > Policy Change. Various subcategories of audit events are displayed.
Right-click Audit Audit Policy Change and then select Properties.
Select the Configure the following audit events, Success, and Failure checkboxes and then click Apply.
For additional information see the Microsoft’s Documentation here.