New
#1
How can I get the latest shut downs/starts/logins/log-outs in Windows?
How can I get the latest shut downs/starts/logins/log-outs / unsucessful logins in Windows 10?
I've read a few articles I found but I couldn't find a good answer.
for example: I went to event viewer > security:
I read that the eventID 4624 is a successful sign-in, which seems incorrect, look at this test:
- I shut down my computer at 08:08:30
- I started my computer at 08:10:39 (give or take 5 seconds)
- I signed in at 08:12:10 (entered my password and hit enter)
...yet, at 08:10:39 I can see event 4624 registered, how's this possible if I signed in later at 08:12:10?
any help much appreciated