Результаты для "kape triage"

KAPE - Cyber Triage DFIR

https://www.cybertriage.com/integration/kape/

KAPE is an efficient and highly configurable triage program that will target any device or storage location, find forensically valuable artifacts, and parse ...

Ваш цифровой след: Погружение в форензику Windows - Хабр

https://habr.com/ru/companies/first/articles/83...

4 сент. 2024 г. ... Анализ реестра. Но вернемся пока к реестру. Чтобы извлечь его в KAPE, надо использовать Target плагин KAPE Triage/RegistryHives. Теперь можно ...

Kroll Artifact Parser And Extractor (KAPE) | Cyber Risk

https://www.kroll.com/en/services/cyber/inciden...

Kroll Artifact Parser and Extractor (KAPE) is an efficient and highly configurable triage program that will target essentially any device or storage ...

KAPE documentation - Eric Zimmerman's tools

https://ericzimmerman.github.io/KapeDocs/

Kroll Artifact Parser and Extractor (KAPE) is primarily a triage program that will target a device or storage location, find the most forensically relevant ...

EricZimmerman/KapeFiles - GitHub

https://github.com/EricZimmerman/KapeFiles

KAPE is an efficient and highly configurable triage program that will target essentially any device or storage location, find forensically useful artifacts, ...

KAPE - SANS Institute

https://www.sans.org/tools/kape

17 июн. 2025 г. ... Download KAPE, built by SANS Instructor Eric Zimmerman, a Kroll ... FOR498: Digital Acquisition and Rapid Triage. Essentials. FOR498 ...

KAPE: A Detailed Exploration. Introduction: | by Dean - Medium

https://medium.com/@cyberengage.org/kape-a-deta...

25 мар. 2024 г. ... At spot number two, we are selecting Kape triage. This is a compound Target that gathers various artifacts like registry hives, event logs, and ...

Triage and acquisition :: Velociraptor - Digging deeper!

https://docs.velociraptor.app/docs/offline_triage/

... triage scenario. Each Kape “Target” is essentially a glob expression with a name. In Velociraptor Windows.KapeFiles.Targets is the most popular artifact for ...

Kroll Artifact Parser and Extractor (KAPE) Official Demo - YouTube

https://www.youtube.com/watch?v=DXE0INTu9ek

6 июл. 2023 г. ... ... kape KAPE is an efficient and highly configurable triage program that will target any device or storage location, find forensically useful ...

The KapeTriage MindMap: supporting more efficient IR investigations

https://www.redscan.com/news/the-kapetriage-min...

13 апр. 2022 г. ... The Kroll Artifact Parser and Extractor (KAPE) is a configurable triage program that enables fast and efficient collection and parsing of ...

Triage Collection and Timeline Analysis with KAPE

YouTube • August 22, 2019 • 01:03:52

Overview As hard drive sizes get larger and larger, conducting full disk forensics is becoming a thing of the past. Why spend hours analyzing a disk image when you can analyze a handful of core Windows artifacts to build your case in a matter of minutes. In this webcast, learn how to use the free tool KAPE to collect key operating system files ...

Remote Data Triage with F-Response and KAPE - Digital Forensics

YouTube • April 25, 2023 • 44:31

Triage and data collection are a crucial part of a DFIR investigation. Tools like KAPE and F-Response can provide the DFIR professional essential tools to perform these tasks as efficiently as possible. Kroll Senior Vice President and KAPE creator/developer, Eric Zimmerman, joined Matt Shannon, Founder of @f-responsevideos5986 to walk through ...

Introduction to KAPE

YouTube • March 18, 2019 • 18:42

As a continuation of the "Introduction to Windows Forensics" series, this episode covers an exciting new tool from Kroll and Eric Zimmerman called KAPE. From the developer, KAPE is an efficient and highly configurable triage program that will target essentially any device or storage location, find forensically useful artifacts, and parse them ...

Cyber Triage 3.2.0 - Batch up files, deploy more easily with EDR, and import KAPE.

YouTube • April 5, 2022 • 11:00

This video will discuss the Cyber Triage 3.2.0 release. This release has many commonly requested DFIR features such as being able to add a batch of artifacts collected from USB or S3, easier to collect via an EDR, and KAPE import. These allow you to analyze your artifacts more quickly by getting more data into Cyber Triage. We hope you enjoy ...

Ingest KAPE DFIR Artifacts into Cyber Triage for Automated Forensic Analysis

YouTube • August 6, 2024 • 05:45

This video shows you how to ingest KAPE data into Cyber Triage to investigate critical #DFIR artifacts. Cyber Triage can ingest data from multiple sources, including KAPE. This video is part of the Cyber Triage Basics course. Cyber Triage is an automated cyber investigation platform that makes investigations faster by ingesting data from ...

Forensic Triage using Kroll Artifact Parser & Extractor

YouTube • June 13, 2024 • 59:06

An insightful webinar on Digital Forensic Triage using Kroll Artifact Parser and Extractor (KAPE), a powerful tool for digital forensics. This session covers everything you need to know about using KAPE effectively in your investigations. Key Points: 1. What is KAPE?: Learn about KAPE and its role in digital forensics. 2. Why use KAPE ...