PDA

View Full Version : PC was started/shutdown log?



John W
13-07-2002, 07:48 PM
Is there any program that will display when a PC is started, shutdown? I dont want to record keystrokes or that sort of thing, just start/stop times?

As an asise, this was mentioned in a famous Dn murder case, where the Police used PC startup time as evidence.

Thanks etc.....John.

godfather
13-07-2002, 08:01 PM
That was a Mac....
Probably derived from a configuration type file that is written to during startup.

Babe Ruth
13-07-2002, 08:11 PM
John W,

Of course if the pc is running Nt / Win2000 / WinXP the information is written in the Event Log.

But just as naturally Admininstrators (or other authorized group(s)) could reset the Event Logs (workstations have 1 for application events , 1 for security events and 1 for system events)

Some else was asking me the same thing the other morning I think I still have the pointers somewhere.