How can I make a query to get a list of DELETED files from windows event log?
The event structure is a bit complex. An event whit event_id:4660 telling "An object was deleted.". but not what object.
The complexity is explained a little more her https://eventlogxp.com/blog/tracking-down-who-removed-files/