遠端桌面登入成功(AD6\Administraor) 167.99.177.229 (2h 32min, aug 3, 2019 y – 2h 56min, aug 3, 2019 y)

Description:

Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx

Remote Desktop Services: Session logon succeeded:

User: AD6\Administrator
Session ID: 5
Source Network Address: 167.99.177.229

Added to timeline:

21 Nov 2019

0

0

107

1081121-離職員工破壞伺服器案

Date: