logon-history.ps1 - Threat Group Cards: A Threat Actor Encyclopedia Archived: 2026-04-05 16:18:05 UTC Home > List all groups > List all tools > List all groups using tool get-logon-history.ps1 Tool: get-logon-history.ps1 Names get-logon-history.ps1 Category Malware Type Reconnaissance, Info stealer Description Downloaded and used by Infostealer. It runs several commands on the infected machine to gather information about it and also the Firefox data of all users of the machine. Information Last change to this tool card: 20 April 2020 Download this tool card in JSON format All groups using tool get-logon-history.ps1 Changed Name Country Observed APT groups   Tortoiseshell, Imperial Kitten 2018-Oct 2023 1 group listed (1 APT, 0 other, 0 unknown) Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=861d4b02-4edd-4bd4-8cbc-e407862da8b7 https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=861d4b02-4edd-4bd4-8cbc-e407862da8b7 Page 1 of 1