🔍
Windows Forensic Handbook
Ctrl
K
Copy
Artifacts by Type
📅
Event Log Artifacts
TerminalServices-RemoteConnectionManager
EventID 1149: User Authentication Succeeded
Last updated
1 year ago