Active Directory Auditing is the monitoring and review of directory changes, authentication activity, group membership, policy changes, and privileged actions.
It helps detect account takeover, privilege escalation, risky configuration changes, and gaps in identity governance.