From aa8b5834d570934a7865da2f3376dda5ba45c8c5 Mon Sep 17 00:00:00 2001
From: pe3zx <pe3zx@users.noreply.github.com>
Date: Tue, 22 Jun 2021 12:42:04 +0700
Subject: [PATCH] Add: BSI-Bund/RdpCacheStitcher to DFIR section

---
 README.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/README.md b/README.md
index 8a7f3c6..1b72816 100644
--- a/README.md
+++ b/README.md
@@ -1120,6 +1120,10 @@ This repository is created as an online bookmark for useful links, resources and
         <td><a href="https://github.com/bromiley/olaf">bromiley/olaf</a></td>
         <td>Office365 Log Analysis Framework: OLAF is a collection of tools, scripts, and analysis techniques dealing with O365 Investigations.</td>
     </tr>
+    <tr>
+        <td><a href="https://github.com/BSI-Bund/RdpCacheStitcher">BSI-Bund/RdpCacheStitcher</a></td>
+        <td>RdpCacheStitcher is a tool that supports forensic analysts in reconstructing useful images out of RDP cache bitmaps.</td>
+    </tr>
     <tr>
         <td><a href="https://github.com/carmaa/inception">carmaa/inception</a></td>
         <td>Inception is a physical memory manipulation and hacking tool exploiting PCI-based DMA. The tool can attack over FireWire, Thunderbolt, ExpressCard, PC Card and any other PCI/PCIe interfaces.</td>