🔍
Windows Forensic Handbook
Ctrl
K
Copy
Artifacts by Type
📅
Event Log Artifacts
Security
EventID 4688: A new process has been created
EventID 4624: An account was successfully logged on
Last updated
1 year ago