Please check the URL.
/docs/reference/security/prebuilt-rules/audit_policies/windows/audit_process_creation_and_command_line