windows - Is there a way of knowing when an executable was last executed? -


in windows, there way find out when executable last executed?

it seems unlikely saved, i'm open other suggestions.

it enough know if executed "recently", example since computer started, last hour etc.

i'm open hackish ideas, checking pagefile maybe see traces left executable?

you can auditing. run gpedit.msc, computer configuration, windows settings, security settings, advanced audit policy configuration, system audit policies, detailed tracking, audit process creation. ask more questions @ superuser.com


Comments

Popular posts from this blog

unicode - Are email addresses allowed to contain non-alphanumeric characters? -

C#: Application without a window or taskbar item (background app) that can still use Console.WriteLine() -

c++ - Convert big endian to little endian when reading from a binary file -