Introduction to KAPE

Описание

As a continuation of the "Introduction to Windows Forensics" series, this episode covers an exciting new tool from Kroll and Eric Zimmerman called KAPE. From the developer, KAPE is an efficient and highly configurable triage program that will target essentially any device or storage location, find forensically useful artifacts, and parse them within a few minutes.

*** If you enjoy this video, please consider supporting 13Cubed on Patreon at patreon.com/13cubed. ***

Introducing KAPE (Kroll Website):
https://www.kroll.com/en/insights/publications/cyber/kroll-artifact-parser-extractor-kape

Introducing KAPE (Eric Zimmerman's Blog):
https://binaryforay.blogspot.com/2019/02/introducing-kape.html

Background Music Courtesy of Anders Enger Jensen:
https://www.youtube.com/user/HariboOSX

#Forensics #DigitalForensics #DFIR #ComputerForensics #WindowsForensics #KAPE