遠端桌面登入成功( NHHQ\Administrator)
本機登入 (16h 3min, aug 1, 2019 y – 15h 51min, aug 2, 2019 y)
Description:
Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx
Remote Desktop Services: Session logon succeeded:
User: NHHQ\Administrator
Session ID: 1
Source Network Address: 本機
Added to timeline:
1081121-離職員工破壞伺服器案
Date:
