Auditing requirements

Hi,

We are tasks to setup Oracle database auditing for 1 of our databases.

What would be the best way doing this? Below the auditing minimum requirements:

1 Successful and Failed logins/authentication

o Looking for compromised accounts or possible insider threat.

2 Table delete/create

o Large numbers of table deletions could indicate "data destruction" by a malicious actor/insider

o Large numbers of table creations could indicate "data poisoning" by a malicious actor/insider (creating random data to obscure the real data)

3 Row delete/create/modify

o Large numbers of row deletions could indicate "data destruction" by a malicious actor/insider