遠端桌面登入成功( NHHQ\Administrator) 192.168.1.168 (15h 53min, aug 2, 2019 y – 2h 56min, aug 3, 2019 y)
Description:
Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtxRemote Desktop Services: Session logon succeeded:
User: NHHQ\Administrator
Session ID: 2
Source Network Address: 192.168.1.168
Added to timeline:
Date:
15h 53min, aug 2, 2019 y
2h 56min, aug 3, 2019 y
~ 11 hours