Windows Session Forensic
Typically I would not call my requirement as a debugging, since what I
need is:
We have a Windows Server 2012 machine, which is logged in by multiple
users and they all worked in their respective sessions, but yesterday
deliberately or by chance someone logged off my session, when a critical
application was running, I want to figure out when was it done i.e my
session logout time and who did it (which user), so that I have some
details at hand before talking to the concerned folks.
Any pointer to glean this data.
No comments:
Post a Comment