0 Votes |
Last Several Logged In Windows Users
Relevance
* Results in a "string"/number |

if (name of operating system as lowercase starts with "win") then((name of parent folder of it, modification time of it) of files "NTUSER.DAT" of folders of folder "c:\users") as string else ("No Login Info Found")
Property Details
2170 | |
Last Several Logged In Windows Users | |
Windows Users NTUSER | |
Examine NTUSER.dat to determine the last several users who logged into a windows endpoint. | |
danielheth | |
danielheth on 1/29/2013 10:32:37 PM | |
7 Downloads | |
![]() ![]() ![]() ![]() ![]() |
Sharing
Relevance Image Sharing: |
Social Media: |
Comments
![]() |
|
if (name of operating system = "WinVista") or (name of operating system = "Win7") or (name of operating system = "Win8") or (name of operating system = "Win2008") or (name of operating system = "Win2008R2") or (name of operating system = "Win2012") then ((name of parent folder of it, modification time of it) of files "NTUSER.DAT" of folders of folder "c:\users") as string else if (name of operating system = "WinXP") or (name of operating system = "WinXP-2003") or (name of operating system = "Win2003") or (name of operating system = "Win2003R2") then ((name of parent folder of it, modification time of it) of files "NTUSER.DAT" of folders of folder "c:\Documents and Settings") as string else ("No Login Info Found") |