This presentation covers the artifacts related to WinSCP. WinSCP has traditionally been associated with external access and exfiltration. However, with some recent changes to Windows 10, WinSCP is an attractive option for attackers to leverage to fly under the radar to conduct lateral movement. Join me on a trip through the 90s as we cover WinSCP and the forensic artifacts associated with it.