Remote Desktop Application vs MSTSC Forensics: The RDP Artifacts You Might Be Missing

Many threat actors utilize Remote Desktop Protocol (RDP) to move laterally within an environment once they have compromised it. There has been quite a bit of documentation around forensic artifacts associated with the Microsoft MSTSC client which has been around since 1998. However, there is also a Microsoft Remote Desktop App that is available in […]

The post Remote Desktop Application vs MSTSC Forensics: The RDP Artifacts You Might Be Missing appeared first on ZeroFox.

Article Link: Remote Desktop …

application artifacts client compromised desktop desktop application documentation environment forensic forensic artifacts forensics microsoft missing protocol rdp remote desktop remote desktop protocol threat threat actors