Standard Operating Procedures

File Deletion Audit - File Shared Drive

Author Confluence SyncLast edited by Confluence SyncUpdated Jul 6, 2026

1 view1 min read1 sections Source

Not yet marked effective — verify this page to set its effective date and review cycle.

Reading tools

Event Viewer File Deletion

2. Expand Windows Logs and then click on Security.

3. Click on Filter Current Log on the right. Select all Event Levels and filer by Event ID 4663.

4. You will then see the Delete actions the team has made.