Find most recently accessed file in home directory
Tactic: Collection
Identify the most recently accessed file in the active users home directory. This can be used to identify the users pattern of
life by understanding what kind of files they typically access.
View Command
To view this TTPs command, you must be logged in with a professional or enterprise license.
LoginTest this TTP
Download Operator (1.7.1)
Follow @preludeorg on Twitter for new chains and more.
Join the Prelude Discord to discuss chains and more.
Keep up to date with code changes and community activity on Github