[Question]
Who was the last user to logon into PC?
① 분석 도구
- Registry Explorer
② 관련 경로
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI
③ 분석 결과
| LastLoggedOnUser | informant |
'CFReDS > Data Leakage Case' 카테고리의 다른 글
| 9. Network interface (0) | 2022.06.23 |
|---|---|
| 8. last recorded shutdown date/time (0) | 2022.06.21 |
| 6. accounts (0) | 2022.06.21 |
| 5. Computer name (0) | 2022.06.21 |
| 4. timezone (0) | 2022.06.20 |
