Detecting logins like a boss- the Seq Client for Windows Logins
Speaking broadly - at least for an always-online server - the logon types of interest are 2 (Interactive) and 10 (Remote Interactive). In order to pick these up, we need to get up close and personal with the event log to extract the event log properties. Doing this quickly turned...