Parse Recent RDP sessions from NTUSER.DAT Files
This EnScript was designed as a "quick hit" to parse and show the MRU values for the Terminal server client for each user. The EnScript checks the Software\Microsoft\Terminal Server Client\Default for each NTUSER.DAT and displays/bookmarks any values.
http://www.forensickb.com Customized EnScript development (v6 & v7) available
YOU MAY ALSO LIKE