LogMeIn

LogMeIn Data

AppsCompound
6 paths from 1 artifacts
Per-user data
Version 1
Drew Ervin

Paths on disk

6 paths from 2 targets

Paths use Windows environment variable syntax

Includes 1 targets

Each one is collected with this target

ApplicationEvents4 paths

References

2 links

support.logmeininc.com/pro/help/how-to-view-logmein-event-log-files-logmein-t-host-preferences-log(opens in new tab)
researchgate.net/publication/313796589_An_exploration_of_artefacts_of_remote_desktop_applications_on_Windows(opens in new tab)

Collect it

KAPE command line for LogMeIn

Source

Destination

--vss--vhdx

kape.exe --tsource C: --tdest D:\Evidence --target LogMeIn

Note: This is a compound target that references 1 other target. The KAPE command resolves them natively; the PowerShell/Batch/WSL scripts flatten every referenced path into explicit copy commands.

Run with administrator privileges. KAPE Documentation

Part of these collections

3 collections collect this target

SANS_Triage
KapeTriage
RemoteAdmin