Keen administrators (the enemy of penetration testers)will take great steps in order to collect logs on different servers.By having a detailed log of activities they may be able to detect abnormal…

Keen administrators (the enemy of penetration testers)will take great steps in order to collect logs on different servers.By having a detailed log of activities they may be able to detect abnormal activities. A skilled intruder will attempt to modify the logging policy in order to prevent the administrator from having access to his detailed log. What command line tool could an attacker use to disable auditing on a Windows server?