ZohoAssist Logs
Overview
Section titled “Overview”Evidence: ZohoAssist Logs
Description: Collect ZohoAssist Application Specific Logs
Category: Applications
Platform: windows
Short Name: zohoasstlg
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes
Background
Section titled “Background”ZohoAssist is a remote support software that logs remote desktop sessions, screen sharing activities, and connection events. These logs track technical support sessions and remote access.
Data Collected
Section titled “Data Collected”This collector gathers structured data about zohoassist logs.
Collection Method
Section titled “Collection Method”This collector gathers log files from ZohoMeeting directories in both system-wide ProgramData and user-specific AppData locations.
Forensic Value
Section titled “Forensic Value”ZohoAssist logs reveal remote support sessions, connection times, technician access, and remote control events. This is vital for investigating unauthorized remote access, data theft during support sessions, and insider threats.