Evidence: RealVNC Logs
Description: Collect RealVNC Application Debug Logs
Category: Applications
Platform: windows
Short Name: realvncl
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes
Background
RealVNC is a popular remote desktop application that maintains debug logs tracking connection events, errors, and session activities. The logs record both server and client operations.
Data Collected
This collector gathers structured data about realvnc logs.
Collection Method
This collector gathers RealVNC service log files and backup logs from the ProgramData directory containing connection and diagnostic information.
Forensic Value
RealVNC logs help identify remote desktop connections, troubleshoot access issues, and investigate unauthorized remote access. They reveal connection attempts, client IDs, and session timelines.
