UltraVNC
Event logs
| Event Log file | Event ID | Description | Notes |
|---|---|---|---|
| Application | 1 | Client connected | Source is UltraVNC. Includes IP address |
| Application | 3 | Client disconnected | Source is UltraVNC |
Application specific log files
Logs are stored in the following location:
%ProgramData%\uvnc bvba\mslogon.log
Timestamp format: DD/M/YYYY HH:MM Local time of the target
Useful grep
Connection received|Client.*disconnected