Bala
09/08/2020, 1:18 AMtheopolis
Bala
09/08/2020, 5:50 AMMike Myers
09/08/2020, 7:13 PMlast
table to check if there have been logins at suspicious times, or logon_sessions
on Windows to see if there are other users connected. There is also the listening_ports
table which you could check for unknown or suspicious processes (although malware doesn't need to do this for an attacker to connect, so you can also check process_open_sockets
).Bala
09/10/2020, 8:55 AM