Greetings,
We need to know how to detect and find a user who is uninstalling or deleting any tools or software on our Window servers.
thank you
Hi mahmoodalamri,
In windows there are no direct logs you can monitor for application uninstall, but you can enable them. Below blog may be helpful: https://www.addictivetips.com/windows-tips/how-to-tell-which-user-installed-or-removed-an-app-in-win...
Then, you can monitor wineventlog:application and look for EventID: 1034 and EventID: 1033.
