🔍
Windows Forensic Handbook
Search
Ctrl + K
TerminalServices-RemoteConnectionManager
EventID 1149: User Authentication Succeeded
Last updated
8 months ago