remote desktop log clearing and gap detector — free browser tool | fatcousin

drop rdp evtx csvs · detect rdp session log gaps · identify rdp channel clearing · surface rdp session reconstruction with cleared log indicators · runs locally

rdp evtx artifacts

drop security / terminalservices evtx csv

or click

Select file

4624 type 10 · LocalSessionManager 21–25 · 4778/4779 · channel 104 clears · record ID gaps · source IP extraction

drop security + terminalservices evtx csv exports

ready