teamviewer.incoming

$ target-query <path/to/target> -f teamviewer.incoming

Details

Module	dissect.target.plugins.apps.remoteaccess.teamviewer.TeamViewerPlugin
Output	records

Module documentation

TeamViewer client plugin.

References:

• https://teamviewer.com/en/global/support/knowledge-base/teamviewer-classic/contact-support/find-your-log-files

• https://www.systoolsgroup.com/forensics/teamviewer/

• https://benleeyr.wordpress.com/2020/05/19/teamviewer-forensics-tested-on-v15/

Function documentation

Yield TeamViewer incoming connection logs.

TeamViewer is a commercial remote desktop application. An adversary may use it to gain persistence on a system.