🔍
Windows Forensic Handbook
Ctrl
k
Copy
Artifacts by Type
📅
Event Log Artifacts
TerminalServices-RemoteConnectionManager
EventID 1149: User Authentication Succeeded
Last updated
2 years ago