does anyone know the best way to pull the last time a password was change from a windows box? i can see that linux and mac have native tables to pull this data but no such luck with windows. I was able to construct a query that pulls the correct data from event viewer but this will only work for as long as the event hangs around. once that event rotates out the query status will return a value suggesting the password hasn’t been changed