遠端桌面登入成功( NHHQ\Administrator)
192.168.1.168 (15 h 53 m, 2 ago 2019 ano – 2 h 56 m, 3 ago 2019 ano)
Descrição:
Microsoft-Windows-TerminalServices-LocalSessionManager%4Operational.evtx
Remote Desktop Services: Session logon succeeded:
User: NHHQ\Administrator
Session ID: 2
Source Network Address: 192.168.1.168
Adicionado na linha do tempo:
1081121-離職員工破壞伺服器案
Data:
