tool to retrieve and analyze server or domain controller login logs — audit user IP associations, authentication trails, logon sessions, and security event logs for forensic investigation and Active ...