Can help show me the code how to sysmon use eventID 23, 26 ?

[sokvathana]

Dear Sir/Madam,
May can you help show me the xml code to create sysmon eventID 23, 26 to track file deteted in window server a little bit that detect local user and domain user.

Thanks regard.

[Copperfie1d]

Hi, you can find in repository:https://github.com/olafhartong/sysmon-modular