遠端桌面登入成功(AD6\Administraor)
167.99.177.229 (2h 32min, aug 3, 2019 y – 2h 56min, aug 3, 2019 y)
Description:
Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx
Remote Desktop Services: Session logon succeeded:
User: AD6\Administrator
Session ID: 5
Source Network Address: 167.99.177.229
Added to timeline:
Date:
2h 32min, aug 3, 2019 y
2h 56min, aug 3, 2019 y
~ 24 min