
What I'm going to do is I'm going to create a custom rule in event viewer that if anybody tries to access the Frank account, it's automatically going to create uh it's going to show us a rule. Uh it's going to show us the event log in event viewer. Uh so like I said, if I can do this in five minutes in event viewer, um you absolutely should be able to do this in your super expensive SIM. Uh it's not hard. It's basically setting a rule. If anybody ever tries to log in to this specific account, lock it or deal with it immediately. Now, you have to log in. You have to log into the account. And
this gets into a bit of trivia. I'm going to call it Frank. What is epoch time for Windows computer systems event logs? Oh, sorry. user accounts. Anyone know? I'm getting January. Speak up. You're really close. What is it? January 1st, 1970 is a great epoch guess. It is correct for Unix. It is correct for a number of things in the file system. Um, it is correct in memory, but it is not correct in this instance. Fantastic. because of the Gregorian calendar cycle. That is the furthest back that you can go for the Gregorian calendar uh instead of the Julian calendar. Uh so very good round of applause that I'd say like one group out of 10 get that [applause]
well done. So you have to log in because if you don't, it says the last time that Frank logged in is January 1st,601 and we will not attack that account. All right.