certutil –setreg policy\EditFlags +EDITF_AUDITCERTTEMPLATELOAD auditpol /set /subcategory:"Certification Services" /success:enable /failure:enable auditpol /set /subcategory:"Registry" /success:enable /failure:enable
Enable Windows Firewall Logging
auditpol /set /subcategory:"{0CCE9225-69AE-11D9-BED3-505054503030}" /failure:enable