CFReDS/Data Leakage Case
7. last logon
genie00
2022. 6. 21. 21:45
[Question]
Who was the last user to logon into PC?
① 분석 도구
- Registry Explorer
② 관련 경로
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI
③ 분석 결과
| LastLoggedOnUser | informant |