Windows Forensic Handbook

👋Welcome
Artifacts by Type
Artifacts by Activity

Powered by GitBook

On this page

Artifacts by Type

📅Event Log Artifacts

TerminalServices-RemoteConnectionManager

EventID 1149: User Authentication Succeeded

Last updated 1 year ago