Quantcast
Channel: Security forum
Viewing all articles
Browse latest Browse all 12072

Finding artifacts related to a user added to a local group

$
0
0

Gentlemen,

I am investigating one case, where I need to identify when an user was added to a local windows group. OS is Win Server 2012. Unfortunately the event logs were archived and no longer available. I suspect the addition was happened during 2017 or 2018. The Net Backup event logs are already removed. Any suggestion, if any registry key keeps these data? Please guide. Many thanks. 

Best Regards


Thanks & Regards Bedanta S Mishra


Viewing all articles
Browse latest Browse all 12072