# Rdp\-Cache\-parser

[DecompHub listing](<https://app.decomphub.com/projects/rdp-cache-parser>) · [JSON record](<https://app.decomphub.com/data/projects/rdp-cache-parser.json>)

## Description

> Windows DFIR tool that parses and reconstructs screen images from RDP bitmap cache files \(\.bin/\.bmc\) \- edge\-match stitching, OCR, and forensic IOC scanning\.

- Category: applications
- Work types: source\-reconstruction
- Targets: RDP
- Project status: unknown
- Listing updated: 2026\-10\-11T16:37:28\.307Z
- Listing first published: 2026\-10\-11T16:37:28\.319Z

## Repository

- Repository: [whitedevil1026/rdp\-cache\-parser](<https://github.com/whitedevil1026/rdp-cache-parser>)
- License: Apache\-2\.0
- Repository stars: 1
- Stars checked: 2026\-10\-10T23:02:02\.546Z
- Repository metadata checked: 2026\-10\-10T23:02:02\.546Z

## Progress

Each value describes only its stated scope. An observation date is when DecompHub read the source; it is not a publisher measurement date.

No sourced numeric progress is currently reported. This is unknown progress, not 0%.

## Project details

- Languages: Python

## Contributing

- Contribution status: unknown
- Help requested: Not reported
- Contribution instructions: Not reported
- Contribution source: Not reported
- Contribution information checked: Not reported
- AI contribution policy: unspecified
- AI policy source: Not reported

## Listing sources

- [Public repository metadata](<https://github.com/whitedevil1026/rdp-cache-parser>)
- [Discovery query](<https://github.com/whitedevil1026/Rdp-Cache-parser/blob/main/README.md>)

## Data notes

Descriptions remain in their recorded source language. Missing values are not inferred. Repository licensing is upstream metadata; this export does not grant rights to upstream code or assets.

Schema version: 1. [Public data documentation](<https://decomphub.com/data>).