Investigation Methodology of a Virtual Desktop Infrastructure for IoT

Table 4

Access information logged in local Ubuntu and Mac systems.

Solution	Ubuntu 12.04	Mac OS 10.8.2
Citrix	Cache: ∖home∖[user name]∖.mozilla∖firefox∖6lhwv183.default∖Cache; ∖_CACHE_[numbers]_; History: ∖home∖[user name]∖.mozilla∖firefox∖6lhwv183.default∖places.sqlite; Cookie: ∖home∖[user name]∖.mozilla∖firefox∖6lhwv183.default∖cookies.sqlite; Session: ∖home∖[user name]∖.mozilla∖firefox∖6lhwv183.default∖sessionstore.js; ⇒ IP address or URL of connection management system (DDC)	Cache: ∖Users∖[user name]∖Library∖Caches∖com.apple.Safari∖Cache.db; History: ∖Users∖[user name]∖Library∖Safari∖History.plist; Cookie: ∖Users∖[user name]∖Library∖Safari∖Cookies.plist; Session: ∖Users∖[user name]∖Library∖Safari∖LastSession.plist; ⇒ IP address or URL of connection management system (DDC)
VMware	∖tmp∖vmware-[user name]∖vmware-view-[numbers].logs; ⇒ IP address or URL of connection management system (View Manager), connection/disconnection time, user ID, VM name, domain name	∖Users∖[user name]∖Library∖Logs∖VMware View Client∖vmware-view.logs; ⇒ IP address or URL of connection management system (View Manager), connection/disconnection time, VM IP address, domain name
Microsoft	∖home∖[user name]∖.bash_history; ⇒ VM name or IP address, user ID (option), user password (option), domain name (option)	∖Users∖[user name]∖Documents∖RDC Connections∖Default.rdp; ⇒ VM name, user ID, domain name