Notifications
Clear all
Topic starter
30/10/2017 10:08 am
I've got a case where remote desktop has been used.
I've located some cachexxxx.bin files in the "Terminal Server Client\Cache folder and the bcache24.bmc files are empty.
I'm trying to extract the images from the cachexxx.bin files. I've tried using the BMC phython script and Bitmapcacheviewer, but as the BMC files are empty I get nothing back.
Has anyone had any luck with just the cache files?
30/10/2017 11:54 am
I'm not sure if this will help, available from the Guidance Software website. It mentions that it can be used to extract images from the files with *.bmc and *.bin extension.
https://
Regards
Topic starter
30/10/2017 12:45 pm
Thanks, I'll try that.
Just need to find my Encase dongle….
Topic starter
30/10/2017 1:02 pm
Yeah that seemed to work, thanks!