Windows 11 Posted February 12 Posted February 12 In reliability monitor I saw that remote desktop connection was successfully installed on 1/31/25, which i thought was weird because it is an arbitrary date in regards to my computer, so I went to Event Viewer, looking for logons and I found what I was looking for. Several logons and special logons, with an account name that is identical to mine except with a $ at the end. Several things talking about impersonation, granting privileges. There are literal thousands of Audit Successes under task category "User Account Management", talking about enumerating credentials and stuff. I'm not a very tView the full article Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.