Added new artifact to All Things OnDrive. <UserCid>_screenshot.dat is created when “Save screenshots I capture to OneDrive” is enabled. It records data on the last screenshot saved. https://malwaremaloney.blogspot.com/p/location-localappdatamicrosoftonedrives.html - ThreadSky

beercow.bsky.social • 45 days ago

Added new artifact to All Things OnDrive. _screenshot.dat is created when “Save screenshots I capture to OneDrive” is enabled. It records data on the last screenshot saved.

https://malwaremaloney.blogspot.com/p/location-localappdatamicrosoftonedrives.html

Comments

Posting Rules

Comments

Posting Rules

Reply