Ctrlk

Security References
Digital Forensics
- Windows
  - Forensics
    Program Execution
    Memory
    Network Log
    Windows Event Logs
    Login Events
    Windows Admin Share
    PowerShell Remoting
    Source System Artefacts
    Persistence
  - Lateral Movement
- SANS RED Poster

Powered by GitBook

On this page

Digital Forensics
Windows
Forensics
Windows Event Logs

PowerShell Remoting

PS Exec target system new service. Default

event id 7045

PreviousWindows Admin Share NextSource System Artefacts

Last updated 1 year ago