private static void PrintExplicitLogonEvents() { try { var lastDays = 30; Beaprint.MainPrint($"Printing Explicit Credential Events (4648) for last {lastDays} days - A process logged on using plaintext credentials\n"); if (!MyUtils.IsHighIntegrity()) { Beaprint.NoColorPrint(" You must be an administrator to run this check"); return; } var explicitLogonInfos = Logon.GetExplicitLogonEventsInfos(lastDays); foreach (var logonInfo in explicitLogonInfos) { Beaprint.BadPrint($" Subject User : {logonInfo.SubjectUser}\n" + $" Subject Domain : {logonInfo.SubjectDomain}\n" + $" Created (UTC) : {logonInfo.CreatedAtUtc}\n" + $" IP Address : {logonInfo.IpAddress}\n" + $" Process : {logonInfo.Process}\n" + $" Target User : {logonInfo.TargetUser}\n" + $" Target Domain : {logonInfo.TargetDomain}\n"); Beaprint.PrintLineSeparator(); } } catch (Exception ex) { Beaprint.PrintException(ex.Message); } }