You know there is security audit log but don't know which events to activate? You already activated it for some events, but should you activate others?

I'll tell you my take on that!