Networking
- Networking
Windows
Linux
Enterprise Architecture
Mac
- Forensics
  - Page 3
Attacker Information
IR Playbook
- Activity from Unmanaged Host
- Recommendations
Reverse Engineering
- Python - Pyinstaller

Powered by GitBook

On this page

Clipboard History RDP
Enable RDP Clipboard History:

RDP Clipboard

PreviousExfiltration NextExfil Exercise

Last updated 6 months ago

Clipboard History RDP

users\USERNAME\AppData\Local\ConnectedDevicesPlatform<UserProfile>\ #Database location, lasts for 12 hours ActivitiesCache.db

Enable RDP Clipboard History:

HKEY_USER\SID\Software\Microsoft\Clipboard #registry key needs to be enabled

How to Perform Clipboard Forensics: ActivitiesCache.db, Memory Forensics and Clipboard History