Windows registry artifactUser Access Logging (SUM DB)
Displays the updating interval for the SUM DB. Default is 24 hours. 60000 = 60 seconds, for example
- System Info
- 1 key
SYSTEM
Registry keys
1 key that RECmd reads for this artifact
SYSTEMPollingIntervalControlSet*\Control\WMI\Autologger\SUMDisplays the updating interval for the SUM DB. Default is 24 hours. 60000 = 60 seconds, for example
References
1 link
Source: RECmd/BatchExamples/DFIRBatch.reb(opens in new tab) v2.22 by Andrew Rathbun and contributors(opens in new tab), MIT License(opens in new tab)