DFIRHub

VPNClients

VPN Clients

  • Compound
  • 15 paths from 5 artifacts
  • Per-user data
  • Version 2
  • Evangelos Dragonas - Paul CABON CERT Almond

Paths on disk

15 paths from 5 targets

Paths use Windows environment variable syntax

Includes 5 targets

Each one is collected with this target

Notes

To do: Add more targets for both enterprise (Cisco AnyConnect, Fortinet, etc.) and consumer VPN providers (NordVPN, ExpressVPN, etc.).