windows - Is there a way of knowing when an executable was last executed? -
in windows, there way find out when executable last executed?
it seems unlikely saved, i'm open other suggestions.
it enough know if executed "recently", example since computer started, last hour etc.
i'm open hackish ideas, checking pagefile maybe see traces left executable?
you can auditing. run gpedit.msc, computer configuration, windows settings, security settings, advanced audit policy configuration, system audit policies, detailed tracking, audit process creation. ask more questions @ superuser.com
Comments
Post a Comment