BreadCrumbs: Remote User Discovery
Remote User Discovery
From Luke Jackson
Revision as of 18:33, 23 August 2010; Ljackson (Talk | contribs)
(diff) ←Older revision | Current revision | Newer revision→ (diff)
(diff) ←Older revision | Current revision | Newer revision→ (diff)
Contents |
[edit]
Summary
This is a simple explaination on how to determin the current user of a remote Windows system.
[edit]
Windows XP SP1 <
nbtstat -a <computername>
[edit]
Windows XP SP2 >
tasklist /v /s <computername> /fi "IMAGENAME eq explorer.exe"
or
qwinsta console /server:<computername>
[edit]
Task List
tasklist /s gbg-qcd-orange /fi "IMAGENAME eq firefox.exe"