I am wondering if there are any tools that I can use to see what devices a user has authenticated with within X amount of time. What I'm wanting to know is if an account was compromised or if users are sharing passwords. AD credentials are used for our G-Suite and Wireless authentication so it'd be great to know from what device and when a user authenticated from even non-domain joined Windows devices. So far the only tools I have seen are above our price range but I am hoping that I can either gather using Powershell.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.