Windows 2019 DC: What user was logged in at a time?
Someone or something logged into a Win 2019 server and tried to SSH to a network device. Is there a way to find out who/what was logged into the server at the time or the ssh attempt? Is there way to further narrow down who might have initiated that attempted SSH?