• caglararli@hotmail.com
  • 05386281520

Does Event Viewer have any sensitive information like password, or such info?

Çağlar Arlı      -    43 Views

Does Event Viewer have any sensitive information like password, or such info?

In this desktop management app, they are allowing access to view event viewer of remote windows machine even for guest privileged users of that app. But other features like RDP, command execution, etc are restricted which is expected as per design. Viewing event logs isn't treated in the same way. I am wondering if there is any way this feature can be exploitable. Powershell logs are there.