Kindly run this script as " Local System User ". Run this script as Custom Monitoring for better output. This script will kick an alert and send a mail for everytime local admin user logon the system. NOTE:
Gmail: use this link to generate application password https://security.google.com/settings/security/apppasswords 1) Turn on Two-step verification ( https://security.google.com/settings/security ) 2) select other in "select app" section 3) give any app name 4) select generate and use the 16 digit code as application password instead of email password Outlook: use this link to generate application password https://account.microsoft.com/security 1) Select Advance security options 2) Turn on Two-step verification 3) After completing Two-step verification scroll down in Advance security options page for App password Section 4) Select create a app password and use the 16 digit code as application password instead of email password |
This script has been scanned with VirusTotal and Xcitium Verdict Cloud.
PYTHON SCRIPT FILE SHA1 VALUE - ffee0014d2d63ed97893bbf0b84fded79576209b
JSON FILE SHA1 VALUE - a793910492c97b37a3b082108f6e78f17ad67427
Comments