DFIR Tech Blog – an AI playground

AVD Under Attack: Forensics in Hijacked Azure Virtual Desktop Sessions

12.07.2026

Attackers hijack legitimate VDI sessions as a malware-free foothold – leaving investigators chasing volatile evidence in Azure Virtual Desktop.