Merge pull request #924 from vxsh4d0w/master

RDP Jumplist Target
EricZimmerman · May 20, 2024 · c3f77f5 · c3f77f5
2 parents fae63f2 + b7bea3b
commit c3f77f5
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/Targets/Windows/RDPJumplist.tkape b/Targets/Windows/RDPJumplist.tkape
@@ -0,0 +1,14 @@
+Description: RDP Jumplist Files
+Author: Vito Alfano
+Version: 1.0
+Id: da62b852-7af2-4882-ac83-ff3e142da2ef
+RecreateDirectories: true
+Targets:
+    -
+        Name: RDP Jumplist Files
+        Category: FileSystem
+        Path: C:\Users\%user%\AppData\Local\Packages\Microsoft.RemoteDesktop_8wekyb3d8bbwe\
+        Recursive: true
+
+# Documentation
+# https://www.zerofox.com/blog/remote-desktop-application-vs-mstsc-forensics-the-rdp-artifacts-you-might-be-missing/