AnyDesk Logs

Evidence: AnyDesk Logs
Description: Collect AnyDesk Logs
Category: Applications
Platform: macos
Short Name: adsl
Is Parsed: No
Sent to Investigation Hub: No
Collect File(s): Yes

AnyDesk is a remote desktop application that maintains trace logs of connections, sessions, file transfers, and user activities. Logs are stored in both user-specific directories and system-wide locations, including custom deployment prefixes.

This collector gathers structured data about anydesk logs.

This collector gathers AnyDesk trace files from user home directories (.anydesk folders with optional custom prefixes), system logs in /var/log, and Application Support directories.

AnyDesk logs are critical for investigating unauthorized remote access, data exfiltration, lateral movement, and insider threats. They reveal connection times, remote IP addresses, file transfers, and session activities often used in ransomware and data theft incidents.