RDP Clipboard

Clipboard History RDP

• users\USERNAME\AppData\Local\ConnectedDevicesPlatform<UserProfile>\ #Database location, lasts for 12 hours ActivitiesCache.db

Enable RDP Clipboard History:

• HKEY_USER\SID\Software\Microsoft\Clipboard #registry key needs to be enabled

How to Perform Clipboard Forensics: ActivitiesCache.db, Memory Forensics and Clipboard History