Add tool: RDP-Replay #34

New Issue

contribution-bot · 2025-11-24T16:45:25Z

contribution-bot commented

2025-11-24 16:45:25 +00:00

Add Tool: RDP-Replay

Submitted by: anon@anon.anon
Type: software
Action: add

Tool Information

Name: RDP-Replay
Description: RDP-Replay Tool 9 yrs old, check validity
URL: https://github.com/ctxis/RDP-Replay
Skill Level: advanced
Platforms: Windows
License: Apache 2.0
Domains: incident-response, static-investigations, fraud-investigation, network-forensics, cloud-forensics
Phases: examination, analysis

Reason

related
https://medium.com/@mathias.fuchs/chasing-ghosts-over-rdp-lateral-movement-in-tiny-bitmaps-328d2babd8ec

Copy-Paste YAML

  - name: RDP-Replay
    type: software
    description: RDP-Replay Tool 9 yrs old, check validity
    domains:
      - incident-response
      - static-investigations
      - fraud-investigation
      - network-forensics
      - cloud-forensics
    phases:
      - examination
      - analysis
    skillLevel: advanced
    url: https://github.com/ctxis/RDP-Replay
    platforms:
      - Windows
    license: Apache 2.0
    accessType: cli
    tags:
      - remote-session
      - rdp-analysis
      - rdp-cache
      - rdp-sessions

For Maintainers

Copy the YAML above
Add to src/data/tools.yaml in the tools array
Maintain alphabetical order
Close this issue when done

Submitted via ForensicPathways contribution form

## Add Tool: RDP-Replay **Submitted by:** anon@anon.anon **Type:** software **Action:** add ### Tool Information - **Name:** RDP-Replay - **Description:** RDP-Replay Tool 9 yrs old, check validity - **URL:** https://github.com/ctxis/RDP-Replay - **Skill Level:** advanced - **Platforms:** Windows - **License:** Apache 2.0 - **Domains:** incident-response, static-investigations, fraud-investigation, network-forensics, cloud-forensics - **Phases:** examination, analysis ### Reason related https://medium.com/@mathias.fuchs/chasing-ghosts-over-rdp-lateral-movement-in-tiny-bitmaps-328d2babd8ec ### Copy-Paste YAML ```yaml - name: RDP-Replay type: software description: RDP-Replay Tool 9 yrs old, check validity domains: - incident-response - static-investigations - fraud-investigation - network-forensics - cloud-forensics phases: - examination - analysis skillLevel: advanced url: https://github.com/ctxis/RDP-Replay platforms: - Windows license: Apache 2.0 accessType: cli tags: - remote-session - rdp-analysis - rdp-cache - rdp-sessions ``` ### For Maintainers 1. Copy the YAML above 2. Add to `src/data/tools.yaml` in the tools array 3. Maintain alphabetical order 4. Close this issue when done --- *Submitted via ForensicPathways contribution form*

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: mstoeck3/forensic-pathways#34