anydesk.filetransfer

$ target-query <path/to/target> -f anydesk.filetransfer

Details

Module	dissect.target.plugins.apps.remoteaccess.anydesk.AnydeskPlugin
Output	records

Module documentation

Anydesk plugin.

Function documentation

Parse AnyDesk filetransfer files.

AnyDesk is a remote desktop application and can be used by adversaries to get (persistent) access to a machine. File transfer (file_transfer_trace.txt) files show what files are downloaded to a system. Timestamps in trace files do not carry a time zone designator (TZD) but are in fact UTC.