> ## Documentation Index
> Fetch the complete documentation index at: https://docs.levelblue.com/llms.txt
> Use this file to discover all available pages before exploring further.

# PCI DSS 10.2.5.c - Windows

|                       |           |                  |             |             |
| --------------------- | --------- | ---------------- | ----------- | ----------- |
| **Role Availability** | Read-Only | **Investigator** | **Analyst** | **Manager** |

The report generated from this template provides a list of any changes, additions, or deletions to any account that a root or administrator user has made. The following table shows the event filters used by this template:

**Filters Used by PCI DSS 10.2.5.c - Windows**

| Field                    | Values                                                 |
| ------------------------ | ------------------------------------------------------ |
| Asset Groups             | "PCI DSS"                                              |
| Category                 | "Security"                                             |
| Data Source              | "Windows NxLog", "AlienVault Agent - Windows EventLog" |
| Reporting Device Rule ID | "624", "4720", "4722", "4725", "4726", "4738"          |
| Suppressed               | False                                                  |

**To generate the PCI DSS 10.2.5.c - Windows report**

1. Go to **Reports > Compliance Templates**.
2. Click **Generate Report** on the specific line for this report.

   The Configure Report dialog box displays.
3. Click **Edit Filters** if you want to modify the selected filters, and then **Continue to Filters**. Do the modifications you need, and then click **Edit Report**.
4. Click the date field if you want to choose a different date range.

   <Frame>
     <img src="https://mintcdn.com/levelblue-5324744e/58jWJ18C3bcpNz-l/images/usm-anywhere/datepicker.webp?fit=max&auto=format&n=58jWJ18C3bcpNz-l&q=85&s=754e4ed5350ec313fb184c52f50a6d84" alt="" width="200" height="204" data-path="images/usm-anywhere/datepicker.webp" />
   </Frame>

   Choose **Last Hour**, **Last 24 Hours**, **Last 7 Days**, **Last 30 Days**, **Last 90 Days**, or **Custom Range** to set a particular date range.
5. Under the Format section, select either **CSV** or **PDF** for the format of the report.
6. Select if you want to generate the report again, and choose **Never**, **Daily**, **Weekly**, **Bi-weekly**, and **Monthly**.
7. Enter an email address to send the report. Select the **Send to my Email Address** option to add your email automatically.
8. Select the **Enable link expiration** option. This link is delivered by email and expires in 14 days.
9. Click **Next**.
10. In the Report Name field, enter a name for the report. This name will be displayed in the Saved Reports page.
11. (Optional.) Add a description that will be included.
12. Under the Number of records section, choose the maximum number of records to include on the report: **20**, **50**, **100**, **500**, **1000**, or **2500**.
13. If you have chosen the PDF format, you will see the Graphs section, which you can use to include additional views. You can add or remove graphs included in the report by clicking the  <img src="https://mintcdn.com/levelblue-5324744e/h05grHs2-GuNWffi/images/usm-anywhere/arrow-right.svg?fit=max&auto=format&n=h05grHs2-GuNWffi&q=85&s=3db5770e085275538949814d89b983b9" className="inline" width="20" height="20" data-path="images/usm-anywhere/arrow-right.svg" /> and the <img src="https://mintcdn.com/levelblue-5324744e/yWllrh2N4cA-lI7S/images/usm-central/arrow-left.svg?fit=max&auto=format&n=yWllrh2N4cA-lI7S&q=85&s=8f4b65fc211f85dc8cd76980562ac066" className="inline" width="20" height="20" data-path="images/usm-central/arrow-left.svg" /> icons.
14. Select **Save & Run** if you wish to keep the report in your [Saved Reports on USM Anywhere](/documentation/usm-anywhere/user-guide/reports/saved-reports) page and receive the report in the indicated email.
15. Click **Run** to run the report.
