Skip to content

Instantly share code, notes, and snippets.

@daubac402

daubac402/Check Windows Security Event Log

Created December 2, 2020 04:59
Show Gist options
  • Save daubac402/3b0d667a27428eb62003608b27821a86 to your computer and use it in GitHub Desktop.
Save daubac402/3b0d667a27428eb62003608b27821a86 to your computer and use it in GitHub Desktop.
Download ZIP
Check Windows Security Event Log
Raw
Check Windows Security Event Log
1. Open EventViewer
2. Check these logs:
- Windows Log > Application
- Windows Log > Security (Check EventID 4624, 4625 for Success and Failed Login)
- Windows Log > System
- Application Service Log > Microsoft > Windows > TaskScheduler > Operational
- Microsoft > Windows > TerminalServices-ClientActiveXCore > ...RPDClient/Operational
- Microsoft > Windows > TerminalServices-LocalSessionManager > Operational
- Microsoft > Windows > TerminalServices-RemoteConnectionManager > Operational
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment