Please select a template

EnCase App Central

Extend the power of EnCase. Access, download and install software apps built by expert EnScript developers that help you get down to business – faster.

Become a Developer

Parse Recent RDP sessions from NTUSER.DAT Files

APPS | Artifact

This EnScript was designed as a "quick hit" to parse and show the MRU values for the Terminal server client for each user. The EnScript checks the Software\Microsoft\Terminal Server Client\Default for each NTUSER.DAT and displays/bookmarks any values.

http://www.forensickb.com Customized EnScript development (v6 & v7) available

DISCUSSION BOARD
FAQ
Version: 1
Tested with:
EnCase Forensic 7.09
Developer: Lance Mueller
Category: Artifact
1015 Downloads
0 Downloads in last 6 months