windows - Is there a way of knowing when an executable was last executed? -


in windows, there way find out when executable last executed?

it seems unlikely saved, i'm open other suggestions.

it enough know if executed "recently", example since computer started, last hour etc.

i'm open hackish ideas, checking pagefile maybe see traces left executable?

you can auditing. run gpedit.msc, computer configuration, windows settings, security settings, advanced audit policy configuration, system audit policies, detailed tracking, audit process creation. ask more questions @ superuser.com


Comments

Popular posts from this blog

ruby - When to use an ORM (Sequel, Datamapper, AR, etc.) vs. pure SQL for querying -

php - PHPDoc: @return void necessary? -

c++ - Convert big endian to little endian when reading from a binary file -