Axiom - RDPHint Data

General (Technical, Procedural, Software, Hardware etc.)

Last Post by tibbs66 5 years ago

1 Posts

1 Users

0 Reactions

2,640 Views

RSS

tibbs66

(@tibbs66)

Eminent Member

Joined: 18 years ago

Posts: 38

Topic starter 09/03/2022 1:33 pm [#19485]

Hi all, does anyone know if Magnet Axiom pulls RDPHint data and if yes, where is this information placed in the results after a case is finished processing. Right now our group gets the RDPHint information from the ntuser RDPHint field after parsing the ntuser.dat file with Reg Ripper.

Thanks for any input!

Libby

Quote