Mastering Windows Network Forensics and Investigation Chapter 13: Logon and Account Logon Events.
Chapter 13: Logon and Account Logon Events
