From 570487e0bd3a61300f52bb943a27638ec7fbaf73 Mon Sep 17 00:00:00 2001
From: V <45754825+vxsh4d0w@users.noreply.github.com>
Date: Thu, 4 Apr 2024 16:24:29 +0000
Subject: [PATCH] Create RDPJumplist.tkape

---
 Targets/Windows/RDPJumplist.tkape | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 Targets/Windows/RDPJumplist.tkape

diff --git a/Targets/Windows/RDPJumplist.tkape b/Targets/Windows/RDPJumplist.tkape
new file mode 100644
index 000000000..e18fb9522
--- /dev/null
+++ b/Targets/Windows/RDPJumplist.tkape
@@ -0,0 +1,13 @@
+Description: RDP Jumplist Files
+Author: Vito Alfano
+Version: 1.0
+Id: da62b852-7af2-4882-ac83-ff3e142da2ef
+RecreateDirectories: true
+Targets:
+    -
+        Name: RDP Jumplist Files
+        Category: FileSystem
+        Path: C:\Users\%user%\AppData\Local\Packages\Microsoft.RemoteDesktop_8wekyb3d8bbwe\
+		
+# Documentation
+# https://www.zerofox.com/blog/remote-desktop-application-vs-mstsc-forensics-the-rdp-artifacts-you-might-be-missing/