Log analyses

From Igor personal wiki

Jump to: navigation, search

Look for user related event in Security event log: <QueryList>

 <Query Id="0" Path="Security">
   <Select Path="Security">*[EventData[Data[@Name='subjectUsername']='thor']]</Select>
 </Query>

</QueryList>

Retrieved from "http://wiki.it-security.ca/404.html"

Public