Audit_RDPandConsoleLogins

List RDP and Console Logins for the last 30 days

Audit_RDPandConsoleLogins

This component will output a list of RDP and Console logins. It will list Username, Timestamp, and IP address (If RDP).

The component works by pulling all events from Event Viewer with ID 22. It then parses the XML from each entry and outputs the User, Address, and Time.

Level
Name
Value
Notes
No Variables required for this component

If this component downloads any external files other then grabbing the script from our repository, they will be listed here so you can do your own due diligence if needed.

Filename
URL
Path
Notes
No external downloads for this component

12/14/2022 – Initial Release

11/24/2023 – Updated to v4 launcher

GET IN TOUCH