-------------------------------

Auditing using OS tools

local security policy
cmdline
To retrieve the policy for the System category:
auditpol /get /category:"System"

To backup all auditing settings to a CSV-formatted text file:
auditpol /backup /file:auditpolicy.csv

To restore all auditing settings from a previously created CSV-formatted text file using /backup:
auditpol /restore /file:c:\auditpolicy.csv

More examples:
AuditPol /List /User /V
AuditPol /List / Category

wmic commands