Unit 5: Windows event logs · Lesson 3 of 6 · 18 min Pro
What they ran: process creation
Use 4688 events to see every command the intruder typed after signing in.
Unit 5: Windows event logs · Lesson 3 of 6 · 18 min Pro
Use 4688 events to see every command the intruder typed after signing in.
Unit 5: Windows event logs · Lesson 3 of 6 · 18 min Pro
Use 4688 events to see every command the intruder typed after signing in.
Pro opens every lesson in Windows and Active Directory Basics and the other courses, with unlimited lab machine time and certificates.