遠端桌面登入成功(AD6\Administraor)
167.99.177.229 (23h 44min, aug 2, 2019 y – 0h 1min, aug 3, 2019 y)
Description:
Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx
Remote Desktop Services: Session logon succeeded:
User: AD6\Administrator
Session ID: 4
Source Network Address: 167.99.177.229
Added to timeline:
Date:
23h 44min, aug 2, 2019 y
0h 1min, aug 3, 2019 y
~ 1423 min