Windows Forensic Handbook

👋Welcome
Artifacts by Type
Artifacts by Activity

Powered by GitBook

TerminalServices-LocalSessionManager

EventID 21: Session logon succeeded EventID 24: Session has been disconnected

Last updated 6 months ago

On this page