UNIX for Dummies Questions & Answers

awk '
(/Privilege Use/) {P=0}
(P) {print $0, (/No Auditing/) ? ";T" : ";S"}
(/Object Access/) {P=1}
' AdvancedAudit.txt

awk '
/Privilege Use/ {P=0}
(P) {print $0, (/No Auditing/) ? ";T" : ";S"}
/Object Access/ {P=1}
' AdvancedAudit.txt

  File System                             No Auditing ;T
  Registry                                No Auditing ;T
  Kernel Object                           No Auditing ;T
  SAM                                     No Auditing ;T
  Certification Services                  No Auditing ;T
  Application Generated                   No Auditing ;T
  Handle Manipulation                     No Auditing ;T
  File Share                              No Auditing ;T
  Filtering Platform Packet Drop          No Auditing ;T
  Filtering Platform Connection           No Auditing ;T
  Other Object Access Events              No Auditing ;T
  Detailed File Share                     No Auditing ;T
  Removable Storage                       No Auditing ;T
  Central Policy Staging                  No Auditing ;T

 ? ";T" : ";S"

echo "1.1.1.3.1.1.1;"    `var=$(awk '/Privilege Use/ {P=0} /Object Access/ {P=1} P' AdvancedAudit.txt | grep -ia 'File System') ; ech...
echo "1.1.1.3.1.1.2"    `var=$(awk '/Privilege Use/ {P=0} /Object Access/ {P=1} P' AdvancedAudit.txt | grep -ia "Handle Manipulation"...
echo "1.1.1.3.1.1.3;"    `var=$(awk '/Privilege Use/ {P=0} /Object Access/ {P=1} P' AdvancedAudit.txt | grep -ia "Filtering Platform ...
echo "1.1.1.3.1.1.4;"    `var=$(awk '/Privilege Use/ {P=0} /Object Access/ {P=1} P' AdvancedAudit.txt | grep -ia "Certification Servi...