Event Type: SuccessAudit Event Source: Quest File Access Audit Source Event Category: Local Access Event ID: 1794 Date: 10/28/2009 Time: 10:07:38 User: RESEARCH\Alebovsky Computer: SERVER Description: Object moved: Primary User Name: ALebovsky Primary User Domain: RESEARCH Client User Name: Client User Domain: User Logon ID: (0x0,0x43A4F) Process: C:\WINDOWS\explorer.exe Object Type: Folder Object Path: C:\documents\backup New Path: C:\RECYCLER\S-1-5-21-184992632-1607737289-1287950321-500\Dc20 Transaction ID: