Final · 12w Me: "When in use, Windows Remote Desktop caches images of the display of the connected machine. This is done to improve performance. This cached data can be viewed with software to possibly recover in... Final @Final 1765240728 Step 1: Search Windows digital forensic artifacts on GoogleStep 2: Find popular artifact example (Prefetch, RunOnce, SRUM...)Step 3: Write engagement tweetStep 4: Repeat as suchStep 5: ???Step 6: PROFIT!!! 1