I'm pretty sure the answer to my question is a simple "No", but I'm going to try it anyways. (And a plain No would help me also.)
We've got a shared computer. Folks may use it as they do, but they won't do more than Googling or sending mails.
Today someone executed a batch file, took his USB stick off and went away.
There is no damage done. I'm just curious if there is a way to see what has been in this batch file. If this is plain source code or just "it MAY have done these things" doesn't matter.
Maybe Windows keeps some tracking? But I never saw this. The user account is a domain account from a Windows Server 2003. Maybe this one keeps tracking?
Is there a way to find out what batch files recently have executed?
Windows 7
Intel-based
User account is accessed over domain
Hasn't been shut down since then
Aucun commentaire:
Enregistrer un commentaire