GoTo Logs
Overview
Section titled “Overview”Evidence: GoTo Logs
Description: Collect GoTo Logs
Category: Applications
Platform: windows
Short Name: gotolgs
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes
Background
Section titled “Background”GoTo (formerly GoToMeeting/GoToAssist) is a remote meeting and support platform that maintains logs of sessions, connections, and user activities during remote support and meetings.
Data Collected
Section titled “Data Collected”This collector gathers structured data about goto logs.
Collection Method
Section titled “Collection Method”This collector gathers log files from the GoTo user profile directory containing session and connection information.
Forensic Value
Section titled “Forensic Value”GoTo logs reveal remote support sessions, meeting participation, and remote access events. This helps investigate unauthorized access, data exfiltration during support sessions, and establish timelines for remote activities.