RdpCacheStitcher

A tool for forensic analysts to reconstruct useful images from RDP cache bitmaps.

Features

• Shows hints where a selected tile might fit best visually
• Provides an ordered list of tiles that could best be placed visually for a selected empty cell
• Previews how a hovered-over tile would look when placed
• Works with multiple screens per case
• Options to exclude already used, non-square or duplicate tiles
• Crops and exports all reconstructed images belonging to a case as PNG
• Sub-window with available tiles is dockable

Manual

A complete manual is provided in the document [RdpCacheStitcher_manual.pdf].

Installing Prequisites and Starting RdpCacheStitcher

You can download prebuilt binaries for 64bit Linux and Windows. For each system, you need to install one necessary prerequisite first.

Ubuntu

• Install package libqt5widgets5: sudo apt install libqt5widgets5
• Run RdpCacheStitcher

Windows

• Install Microsoft Visual C++ 2017 Redistributable (64 bit) package
• Unzip the RdpCacheStitcher archive anywhere on your system
• Run RdpCacheStitcher.exe

Building from Source

If you want to build RdpCacheStitcher from source, you need to install the Qt development framework first. Then, simply open the file RdpCacheStitcher.pro in Qt Creator and build the project.

License

RdpCacheStitcher is free software: you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation.

> Visit RdpCacheStitcher Website <