is there any way to find out who has modified /deleted sccm audit logs ?
I could find that there is some major settings changed in on going PROD deployment and tried to find out who has done that ? I have checked the same in Audit logs I couldn’t find any single entry related to same deployment. It is happening very often in my environment. Any one plz help ?