Filtering windows security logs by LogonProcessName

前端 未结 0 834
遥遥无期
遥遥无期 2020-12-04 03:21

I need to filter security logs by these parameters:

  • Username != ANONYMOUS LOGON
  • EventId = 4624 or 4625
  • LogonProcessName = NtLmSsp
<
相关标签:
回答
  • 消灭零回复
提交回复
热议问题