Windows Forensic Handbook
Search
Ctrl + K
TerminalServices-RemoteConnectionManager
EventID 1149: User Authentication Succeeded
Last updated
6 months ago