KAPE Files

Community-created Targets and Modules for use with KAPE
Download KAPE · Report a Bug · Request Feature

QUICK START

KAPE is an efficient and highly configurable triage program that will target essentially any device or storage location, find forensically useful artifacts, and parse them within a few minutes. KAPE can be downloaded HERE.

For thorough documentation, go HERE!! This URL will always be the latest documentation.

It is also possible to attend KAPE training from Kroll instructors. Details can be found HERE!!

NOTE: We have clarified KAPE usage permissions for commercial applications. See details here.

Downloading KapeFiles for KAPE

To download the latest files, click the "Sync with Github" button in gkape.exe or run kape.exe --sync

Contributing

This repository serves as a place for community-created Targets and Modules for use with KAPE.

Please send PRs should you come up with new Targets or Modules for inclusion in the project!

Targets

If you need help with creating Targets, check out this guide. Also consult the Target Guide, Target Template, Compound Target Guide or Compound Target Template to ensure the Target(s) follow the same format.

Modules

Be sure to point the BinaryUrl property to the download location in Module files!

All other info including requirements, etc. should be documented at the end of the Module in comment blocks.

NOTE: BEFORE INITIATING A PR, PLEASE ENSURE YOU HAVE COMPLETED THE STEPS LISTED WITHIN THE PULL REQUEST TEMPLATE PRIOR TO SUBMISSION!

Eric Zimmerman