We did the Admin audit log reports. We split it into two. Anything deleted by the admin and log of changes. good luck auditors suck