Skip to content

Instantly share code, notes, and snippets.

Author: "Andrew Rathbun"
Description: "Kroll RECmd Batch File"
Id: ecc582d5-a1b1-4256-ae64-ca2263b8f971
Keys:
-
Category: "System Info"
Comment: "Displays the username of the last user logged in to this system"
Description: WinLogon
HiveType: SOFTWARE
KeyPath: "Microsoft\\Windows NT\\CurrentVersion\\WinLogon"