‫Let's see a Gather module on Windows systems in terms of this module list, the information of the machines
‫that have made remote desktop connections to this machine.
‫If you use this command on a server, you can find the privileged users, such as system admins and
‫database admins.
‫In fact, this module looks at the compromised systems registry and lists the keys and values from the
‫path of each key user's software.
‫Microsoft Terminal Server client.