Someone else might have a better way to do it, but I detect these by a rule for ObjectDelete.EventInfo where the text info is '*audit log was cleared*'. This has worked for me, and hope this helps!
↧
Someone else might have a better way to do it, but I detect these by a rule for ObjectDelete.EventInfo where the text info is '*audit log was cleared*'. This has worked for me, and hope this helps!