Evidence: ZohoAssist Logs
Description: Collect ZohoAssist Application Specific Logs
Category: Applications
Platform: windows
Short Name: zohoasstlg
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes
Background
ZohoAssist is a remote support software that logs remote desktop sessions, screen sharing activities, and connection events. These logs track technical support sessions and remote access.
Data Collected
This collector gathers structured data about zohoassist logs.
Collection Method
This collector gathers log files from ZohoMeeting directories in both system-wide ProgramData and user-specific AppData locations.
Forensic Value
ZohoAssist logs reveal remote support sessions, connection times, technician access, and remote control events. This is vital for investigating unauthorized remote access, data theft during support sessions, and insider threats.
