public void when_int32_values_are_not_same_is_should_not_match() { UInt32 data = 0; UInt32 query = 1; var record = LogonEvent.CreateRecord(String.Empty, data); var predicate = Filter.IsUInt32(LogonEvent.LogonType, query); Assert.IsFalse(predicate.Test(record)); }
public void WriteRecord(LogonEvent record) { Console.WriteLine( record.EventID + "\t" + record.Username + "\t" + record.Domain + "\t" + record.HwAddress + "\t" + record.IpAddress + "\t" + record.Hostname + "\t" + record.Workstation + "\t" + record.StartTime + "\t" + record.EndTime ); }
public static LogonEventProxy Convert(LogonEvent f) { LogonEventProxy p = new LogonEventProxy(); p.Domain = f.Domain; p.EventID = f.EventID; p.Hostname = f.Hostname; p.HwAddress = f.HwAddress; p.IpAddress = f.IpAddress; p.StartTime = f.StartTime; p.Username = f.Username; p.Workstation = f.Workstation; return(p); }
protected void OnSessionLogoff(int sessionId) { Account account = new Account(GetSessionUser(sessionId)); EventLog.WriteEntry( string.Format("User {0}\\{1} logged off", account.Domain, account.UserName), EventLogEntryType.Information, 528 ); LogonEventAdapter adapter = new LogonEventAdapter(credentials); LogonEvent record = adapter.Find(account); adapter.Close(record.EventID); }
public void WriteRecord(LogonEvent record) { Console.WriteLine("User: {0}\\{1} (Event ID={2})", record.Username, record.Domain, record.EventID); Console.WriteLine(Separator); Console.WriteLine("\t Computer: {0} (NetBIOS Name: {1})", record.Hostname, record.Workstation); Console.WriteLine("\tIP-address: {0} (MAC-address: {1})", record.IpAddress, record.HwAddress); if (record.EndTime == DateTime.MinValue) { Console.WriteLine("\t Session: {0} -> [(still logged on)]", record.StartTime); } else { Console.WriteLine("\t Session: {0} -> {1}", record.StartTime, record.EndTime); } Console.WriteLine(); }
public void WriteRecord(LogonEvent record) { Console.WriteLine(" <LogonEvent ID={0}>", record.EventID); Console.WriteLine(" <Logon>"); Console.WriteLine(" <Username>{0}</Username>", record.Username); Console.WriteLine(" <Domain>{0}</Domain>", record.Domain); Console.WriteLine(" </Logon>"); Console.WriteLine(" <Computer>"); Console.WriteLine(" <HwAddress>{0}</HwAddress>", record.HwAddress); Console.WriteLine(" <IpAddress>{0}</IpAddress>", record.IpAddress); Console.WriteLine(" <Hostname>{0}</Hostname>", record.Hostname); Console.WriteLine(" <Workstation>{0}</Workstation>", record.Workstation); Console.WriteLine(" </Computer>"); Console.WriteLine(" <Session>"); Console.WriteLine(" <StartTime>{0}</StartTime>", record.StartTime); Console.WriteLine(" <EndTime>{0}</EndTime>", record.EndTime); Console.WriteLine(" </Session>"); Console.WriteLine(" </LogonEvent>"); }
/// <summary> /// Records an logout event. The event ID is remotelly queried using the logged on /// user and domain as search preferences. The current workstation is detected /// automatic. /// </summary> void Logout() { Account account = new Account(); try { EventLog.WriteEntry( ProgramInfo.Product, string.Format("User {0}\\{1} logged off", account.Domain, account.UserName), EventLogEntryType.Information, 528 ); } catch (System.Security.SecurityException exception) { Report(exception); } LogonEventAdapter adapter = new LogonEventAdapter(this.options.Credentials); LogonEvent record = adapter.Find(account); adapter.Close(record.EventID); }
public List <LogonEvent> Find(LogonEvent filter, LogonEventMatch match) { return(proxy.FindLogonEvents(filter, match)); }
public List <LogonEvent> Find(LogonEvent filter) { return(Find(filter, LogonEventMatch.Exact)); }
public void Delete(LogonEvent record) { Delete(record.EventID); }
public void Close(LogonEvent record) { Close(record.EventID); }
public int Add(LogonEvent record) { return(Add(record.Username, record.Domain, record.Workstation, record.HwAddress)); }
public void Handle(LogonEvent message) { ActivateItem(IoC.Get <DashboardViewModel>()); NotifyOfPropertyChange(() => IsLoggedIn); }