🔍
Windows Forensic Handbook
Search...
Ctrl + K
Artifacts by Type
📅
Event Log Artifacts
TerminalServices-RemoteConnectionManager
EventID 1149: User Authentication Succeeded
Last updated
1 year ago