This week I talk about how to approach investigations involving remote desktop connections.