Get-RdpLogonEvent.ps1
gist.github.com
external-link
GitHub Gist: instantly share code, notes, and snippets.

Get-RdpLogonEvent: extract the list of recent RDP logons from the event viewer and become a magician 🧙‍♀️ that can answer impossible questions like “is it really using Kerberos (nope), or did it downgrade to NTLM (again)”?

  • 0 users online
  • 1 user / day
  • 1 user / week
  • 1 user / month
  • 1 user / 6 months
  • 1 subscriber
  • 119 Posts
  • 1 Comment
  • Modlog