Skip to content
RDPCacheparser

Posts tagged: #event-logs

← Back to all posts
RDP Lateral Movement Forensics: Source Host Artifacts
Which artifacts on the RDP source host show where a user connected and when, and how to use them to date and attribute what the bitmap cache shows.
lateral-movementrdp-bitmap-cacheevent-logsregistry