Skip to content

Instantly share code, notes, and snippets.

@StaniTr

StaniTr/Part 6

Created January 30, 2015 12:38
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save StaniTr/9e29e88b3482997668b3 to your computer and use it in GitHub Desktop.
Save StaniTr/9e29e88b3482997668b3 to your computer and use it in GitHub Desktop.
Download ZIP
No LOGON
Raw
Part 6
--SELECT entries with LOGOFF w/o LOGON
SELECT Session_ID, TIMESTAMP
FROM puzzSessions
WHERE ActionName='LOGOFF' AND session_id NOT IN(
--select entries where no LOGOFF
SELECT Session_ID
FROM puzzSessions
WHERE ActionName='LOGON'
)
-- RESULT: 1 ID - 1 LOGOFF --logoff from 14 Dec 2014 --login ?? - hacker
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment