Post/aux modules for Recall collection

[sempervictus]

Summary

We probably want to include collection, parsing, and analysis of Recall data la this netexec PR or the totalrecall script.

Basic example

1. Connect over RPC to remote windows machine/get a session (post version)
2. Enumerate/qualify Recall state and storage locations
3. Collect contents of storage and relevant registry/database info for access
4. Parse and extract recall data
5. Report notes, creds, and other useful information while storing parsed loot and (optionally) entire collected sample

Motivation

Because

[Marshall-Hallenbeck]

Looks like @xaitax already pretty much did that? https://x.com/xaitax/status/1799140614241501550

[xaitax]

I will check what's required in terms of changes or if feasible at all on the 18th. 👍🏻 No point adding it now anymore.

[adfoster-r7]

This sounds cool; Is it a useful module still with the recent news? 👀

[xaitax]

Hi @adfoster-r7

This sounds cool; Is it a useful module still with the recent news? 👀

I have the new CoPilot+ laptop and once they roll Recall out in the Insider channel I will work on version 2 of my TotalRecall script as well as adjusting my MSF module (as shown above).

Cheers, Alex