遠端桌面登入成功(AD6\Administraor)
167.99.177.229 (0h 13min, aug 3, 2019 y – 0h 15min, aug 3, 2019 y)
Description:
Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx
Remote Desktop Services: Session logon succeeded:
User: AD6\Administrator
Session ID: 5
Source Network Address: 167.99.177.229
Added to timeline:
1081121-離職員工破壞伺服器案
Date:
