Home How To Windows RDP-Related Event Logs: Identification, Tracking, and Investigation

Windows RDP-Related Event Logs: Identification, Tracking, and Investigation

0
0
1,044

Jonathon Poling has published a very useful post about forensicating RDP-related event logs. You will learn a lot about the following event IDs: 1149, 4624, 4625, 21, 22, 24, 25, 39, 40, 4778, 4779, 23, 4634, 4647 and 9009. You can find the post here.

Load More Related Articles
Load More In How To

Leave a Reply

Your email address will not be published. Required fields are marked *