rustdesk.logs

$ target-query <path/to/target> -f rustdesk.logs

Details

Module	dissect.target.plugins.apps.remoteaccess.rustdesk.RustdeskPlugin
Output	records

Module documentation

Rustdesk plugin.

Function documentation

Parse RustDesk log files.

Rustdesk is a remote desktop application that can be used to get (persistent) access to a machine. The project is open source and can be found at: https://github.com/rustdesk/rustdesk/

The log files are stored in different locations, based on the Target OS and client type. Unlike Anydesk, Rustdesk does carry a time zone designator (TZD).

References:

• https://rustdesk.com/docs/en/self-host/rustdesk-server-pro/faq

• https://www.reddit.com/r/rustdesk/comments/1072zst/going_to_need_to_know_where_the_client_installer/

• https://github.com/IRB0T/Remote-Access-Tools—4N6/blob/main/RustDesk/README.md

• https://github.com/rustdesk/rustdesk/wiki/FAQ#access-logs