The 4W’s in logging and auditing

• Who was responsible for the change
• What change was made
• When was a change made
• From where was the change effected

Put into a single line: Who effected what change, when, and from where

Adapted from http://www.draware.dk/fileadmin/ManageEngine/ADAudit/adauditcase-study-plains-all-american-pipeline.pdf
Archive (PDF)