Hello,
Does anyone have a utility to decipher log on and log off events from a .evt Security Log file. I understand that the log type is 3 which means interactive for the 538 and 540 event id's pertaining to logon/logoff but there are many events and its difficult to sort thru to be able to tell someone he/she logged on at this time or logged off at this time...
Can anyone provide more info or any tips/utilities?
Thanks in advance.
Tony
Does anyone have a utility to decipher log on and log off events from a .evt Security Log file. I understand that the log type is 3 which means interactive for the 538 and 540 event id's pertaining to logon/logoff but there are many events and its difficult to sort thru to be able to tell someone he/she logged on at this time or logged off at this time...
Can anyone provide more info or any tips/utilities?
Thanks in advance.
Tony