Create RDPJumplist.tkape

EricZimmerman · Apr 4, 2024 · 570487e · 570487e
1 parent 79d56f2
commit 570487e
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/Targets/Windows/RDPJumplist.tkape b/Targets/Windows/RDPJumplist.tkape
@@ -0,0 +1,13 @@
+Description: RDP Jumplist Files
+Author: Vito Alfano
+Version: 1.0
+Id: da62b852-7af2-4882-ac83-ff3e142da2ef
+RecreateDirectories: true
+Targets:
+    -
+        Name: RDP Jumplist Files
+        Category: FileSystem
+        Path: C:\Users\%user%\AppData\Local\Packages\Microsoft.RemoteDesktop_8wekyb3d8bbwe\
+
+# Documentation
+# https://www.zerofox.com/blog/remote-desktop-application-vs-mstsc-forensics-the-rdp-artifacts-you-might-be-missing/