I am trying to determine who changed a folder using the security audit log. I have exported the log and I am parsing through the file with a text editor but I am not sure what I should be looking for. Can anyone point me in the right direction? Thanks for any help.

Hi,Please refer to the following article: Audit object accesshttp://technet.microsoft.com/en-us/library/cc776774(WS.10).aspxIt includes a list of events for your reference.This posting is provided "AS IS" with no warranties, and confers no rights.