Windows DFIR tool that parses and reconstructs screen images from RDP bitmap cache files (.bin/.bmc) - edge-match stitching, OCR, and forensic IOC scanning.
python ocr incident-response forensics dfir cybersecurity rdp threat-hunting remote-desktop digital-forensics security-tools bitmap-cache pyside6 windows-forensics forensic-tool rdp-cache screen-reconstruction
-
Updated
May 22, 2026 - Python