you can use the network monitor -----you will find it in the windows component
you can use it to monitor the traffic inbound and out bound of server which you install this tool on it
to Audit the log info or any object you need to edit the group policy to enable auditing success an failure to do this
start ---->run --->gpedit.msc ----->windows setting ---->security setting ------>local policies --->Audit policy
that's it............enjoy
المفضلات