GoTo Logs

Overview

Evidence: GoTo Logs Description: Collect GoTo Logs Category: Applications Platform: windows Short Name: gotolgs Is Parsed: No Sent to Investigation Hub: No Collect File(s): Yes

Background

GoTo (formerly GoToMeeting/GoToAssist) is a remote meeting and support platform that maintains logs of sessions, connections, and user activities during remote support and meetings.

Data Collected

This collector gathers structured data about goto logs.

Collection Method

This collector gathers log files from the GoTo user profile directory containing session and connection information.

Forensic Value

GoTo logs reveal remote support sessions, meeting participation, and remote access events. This helps investigate unauthorized access, data exfiltration during support sessions, and establish timelines for remote activities.