Set Monitor of Program Execution for Audit Sessions
Use this group policy to enable recording for all programs executed in an audited session. You can export these monitoring events when reviewing a session and they are also recorded in the Detailed Execution reports.
If this policy is Not configured, by default, this feature is not enabled.
This group policy modifies the event.execution.monitor parameter in the agent configuration file.