Explanation/Reference:
Explanation:
Audit policy change defines whether every incident of a change to user rights assignment policies, audit
policies, or trust policies is audited.
Audit object access defines whether the event of a user accessing an object--for example, a file, folder,
registry key, printer, and so forth--that has its own system access control list (SACL) specified is audited.
References: https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/basic-audit-
policy-change
https://docs.microsoft.com/en-us/windows/security/threat-protection/auditing/basic-audit-object-access