Report Overview
Visitedpublic
2024-07-23 01:52:10
Tags
Submit Tags
URL
github.com/EricZimmerman/KapeFiles/archive/master.zip
Finishing URL
about:privatebrowsing
IP / ASN

140.82.121.3
Title
about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0
Host Summary
Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
---|---|---|---|---|---|---|---|---|
r10.o.lencr.org | unknown | 2020-06-29 | 2024-06-06 21:45:11 | 2024-07-22 18:12:14 | 2.9 kB | 8.0 kB | ![]() 23.33.119.57 | |
github.com | 1423 | 2007-10-09 | 2016-07-13 12:28:22 | 2024-07-22 19:13:57 | 507 B | 3.6 kB | ![]() 140.82.121.3 | |
codeload.github.com | 62359 | 2007-10-09 | 2013-04-18 13:49:11 | 2024-07-18 10:34:01 | 521 B | 562 kB | ![]() 140.82.121.9 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
No alerts detected
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
File detected
URL
codeload.github.com/EricZimmerman/KapeFiles/zip/refs/heads/master
IP / ASN

140.82.121.9
File Overview
File TypeZip archive data, at least v1.0 to extract, compression method=store
Size561 kB (560876 bytes)
MD5e93ef92ce2273cafd2ccfeb40eb6bb97
SHA1ff64924a035380fc7729e1ce015113cfa5162a76
Archive (741)
Filename | MD5 | File type |
---|---|---|
bug_report.md | f0650658ace1992ba07060054b10dbc0 | ASCII text |
feature_request.md | c3aa736613592fbf91405f43f313face | ASCII text |
PULL_REQUEST_TEMPLATE.md | 3c196b1dcb863fce10d6b15e0e4ec769 | ASCII text, with very long lines (538) |
verify.yml | 524be62dfb8b1c1d627e7b8b18dc6f4e | ASCII text |
.gitignore | 67dcb14edaad0b1203e1bf15c6350fd8 | ASCII text |
.yamllint | c8871e552d9f7b0765bd64225ff3b97d | ASCII text |
CONTRIBUTING.md | 3a590225454b4b18d8cb50063f593ad4 | ASCII text |
LICENSE | 8b6b996b89d3f1971fd6d7e67a1e10c7 | ASCII text |
Plaso.mkape | f7ce1c43fbcc21d8b3930e0008c60182 | ASCII text |
Volatility_apihooks.mkape | e59b9f8ad79a24b6697cfa603135dee2 | ASCII text |
Volatility_dlldump.mkape | d982f987f9f1b57278b7086a7b9d7296 | ASCII text |
Volatility_dumpfiles.mkape | 066b4cb5ed6ffb9389438641137b8e9f | ASCII text |
Volatility_filescan.mkape | 8209f22df62f66953590d01b18aaaa5b | ASCII text |
Volatility_handles.mkape | e544e0d3e468f1488cac0e8893efb379 | ASCII text, with very long lines (318) |
Volatility_malfind_dump.mkape | c598d1089bb76c7467e6a74b6364a97b | ASCII text |
Volatility_memdump.mkape | 8f0f4f38608128f22b4ca0c7100a0452 | ASCII text |
Volatility_mftparser.mkape | 28c4abc9364be84f54031953539f639a | ASCII text, with very long lines (318) |
Volatility_moddump.mkape | 137105f9054c1475652ee26fc16b1fb5 | ASCII text |
Volatility_procdump.mkape | 4f29f3992852f4ee65e9f0c17c36042b | ASCII text |
Volatility_shellbags.mkape | dfa13792fdefeec589cf77b326e74d4f | ASCII text, with very long lines (318) |
Volatility_timeliner.mkape | b52650c4655a8197bcbe00f5fb4c5007 | ASCII text, with very long lines (318) |
CrowdStrike_CrowdResponse.mkape | 5a8235712fe20493ccb56746b11a5cee | ASCII text, with very long lines (385) |
DensityScout.mkape | e9604563e7d7d31d1ff4fb03930bca8e | ASCII text |
DumpIt_Memory.mkape | f16536207b2d324cbee0ce7e1030615c | ASCII text |
DumpIt_Memory_ARM.mkape | f726c467cc514c906d7c2d7d92085f8b | ASCII text |
Everything_ParseEFU.mkape | c33aeaec0b1a5609278cc424c0ab6ba3 | ASCII text |
ExifTool.mkape | 2a1ec38873befeea40e2af461a66fbe3 | ASCII text |
BMC-Tools_RDPBitmapCacheParser.mkape | 8038aa462f8d67690fa08bb23233e8d3 | ASCII text |
BackstageParser.mkape | 2ab4e7dd4d03307ab94358e448fb8afe | ASCII text, with CRLF line terminators |
BitsParser.mkape | c4235190f21bef86b509bea7c0044acd | ASCII text, with CRLF line terminators |
Bulk_extractor.mkape | 232637d29b50822fd2518224b2683eca | ASCII text, with very long lines (467), with CRLF line terminators |
CCMRUAFinder_RecentlyUsedApps.mkape | d498b6eed04fc29983111ca3878d30e6 | ASCII text |
Chainsaw.mkape | 5e7b887e2cf64f6bd248fc03a8307782 | ASCII text, with very long lines (305) |
DHParser.mkape | 995e8e22801b6ce9d2ad92632f792c07 | ASCII text |
DeepblueCLI.mkape | f6d486cfb6758da2ed783c36d97205d6 | ASCII text |
Ese2csv_SRUM.mkape | b2502041e71c8264707c4be0478cfeda | ASCII text, with CRLF line terminators |
Events-Ripper_All.mkape | 252ad4b0ad2ef54e2e769d10a6b6a27e | ASCII text, with CRLF line terminators |
Events-Ripper_eventFile.mkape | b7eae502c5533b7f02578db8bcdd6b61 | ASCII text, with CRLF line terminators |
EvtxHussar.mkape | 48649a4a28bf47eb04a4cf97fba35c77 | ASCII text |
HatTrickFreenetParser.mkape | 54eafa67e02b1c3403a7b8a78bb47056 | ASCII text |
hayabusa_EventStatistics.mkape | 4da4d2429f9c2e0192ad9cc699954d37 | ASCII text |
hayabusa_LiveResponse.mkape | f89b70d1ac1ed867386158171c223270 | ASCII text |
hayabusa_LogonSummary.mkape | 2cee695dd927b5a9447365ed2c351723 | ASCII text |
hayabusa_OfflineEventLogs.mkape | 26d4d1a30e7daabc54e0a80e8aafdd8a | ASCII text |
hayabusa_OfflineLogonSummary.mkape | 77efd63031186cfaa778fbe6f90c8921 | ASCII text |
hayabusa_UpdateRules.mkape | 029d30af45acbedfc2f0f5c1aa40861d | ASCII text |
INDXRipper.mkape | 2ba99b3aa95927acb601747309e9220f | ASCII text |
KernelDump.mkape | 20b9c5a081810f315ddf14f70e597dd9 | ASCII text |
LevelDBDumper.mkape | 092e81f04bcb6fe414eabf4995e1753d | ASCII text |
Loki_LiveResponse.mkape | 5b91621403c5581ed54e629120961bb8 | ASCII text |
Loki_Scan.mkape | b5d52a54d7f1835c03a6e7f85df354df | ASCII text |
LolDriverScan.mkape | 29c4a75b8fe1f56143b37820c0d1dd96 | ASCII text, with very long lines (304) |
MMDBCmd.mkape | 000c98fa9fb7c99d7113d1cca42c0cc9 | ASCII text |
Mplog-Parser.mkape | ee57e59fd6a9849374e6aa533ef6e0b6 | ASCII text, with CRLF line terminators |
ObsidianForensics_Hindsight.mkape | d67d717a925dbe9809566fc6de09fe03 | ASCII text, with CRLF line terminators |
OneDriveExplorer.mkape | 9acd79d3bf877bd6379b1e9d7537de26 | ASCII text, with CRLF line terminators |
PowerShell_AD_Timeline.mkape | abfdd1fc51c65be1746ce3abc2251d8a | ASCII text, with very long lines (335) |
PowerShell_ConvertPSHistoryTo-CSV.mkape | a77cf57421ff5e42cc70c1ef2fe5b672 | ASCII text, with CRLF line terminators |
PowerShell_ConvertUsageLogsTo-CSV.mkape | 95da04a6c8b65050f1c23a84b4616d4b | ASCII text, with CRLF line terminators |
PowerShell_ConvertWindowsDefenderMPLogTo-CSV.mkape | fc284baff222fe089fc44d7764c41c7e | ASCII text, with CRLF line terminators |
PowerShell_Execute-BmcTools.mkape | 0dec61f93d151a09a9ba44b7da7fa78c | ASCII text, with CRLF line terminators |
PowerShell_Execute-ThumbcacheViewer.mkape | 1b6a3577af0233e44778c224eff704b0 | ASCII text, with CRLF line terminators |
PowerShell_Execute-Winlogbeat.mkape | c37f9f22d6ac6cc3c64eb6c0e47c2601 | ASCII text, with CRLF line terminators |
PowerShell_Get-ChainsawSigmaRules.mkape | 04c02565b4c3e258dc7e9628c15a78a7 | ASCII text |
PowerShell_Get-DoSvc4n6.mkape | 11fc5b90ad611f792019f6e0a9d50ee5 | ASCII text |
PowerShell_Get-InjectedThread.mkape | 0401e660bd54056c25f7fa738db96e50 | ASCII text |
PowerShell_Get-NetworkConnection.mkape | bb040f45a7826c51d3db386aa5889236 | ASCII text |
PowerShell_MFTECmd_J-MFTParsing.mkape | 3efb9f5512e5c7d5b3d552db5fcf8788 | ASCII text |
PowerShell_Move-KAPEConsoleHost_history.mkape | 2e9d7a5b32636e29f88acdd32f1f5998 | ASCII text |
PowerShell_Netscan.mkape | d18408e15f1030bd1759697210b7be8f | ASCII text |
PowerShell_PCAParser.mkape | df683c799ea7d1a28fcef962a94cfc0f | ASCII text |
PowerShell_Parse-MatterMostDownloadsJson.mkape | 328ead48f81c80455a36befe80df58c0 | ASCII text |
PowerShell_Signed.mkape | a5500ea4c09449b9049456d15eb814a5 | ASCII text |
PowerShell_SrumECmd_SRUM-RepairAndParse.mkape | ac92336ee3c7f5d8f21fef055f3fc8f2 | ASCII text |
PowerShell_SumECmd_SUM-RepairAndParse.mkape | 5a4f03e8cbffb5671a8bcef70a7cfc46 | ASCII text |
PrefetchDecompressionEnMasse.mkape | 3ff855797dce97739d635f6d754b4be1 | ASCII text |
README.md | f47410ec0c83b2df544f88f88c96cfe3 | ASCII text |
RegRipper_NTUser-Variable.mkape | ed2102ffb88c3f82413547103ce55336 | ASCII text |
RegRipper_NTUser.mkape | d94e453fc25b03777eccd5a5e0ff96d1 | ASCII text |
RegRipper_SAM.mkape | 3f5d0c454b01482d813111e68bcfb717 | ASCII text |
RegRipper_SECURITY-Variable.mkape | df87be5af9b913011d54840d651e04b5 | ASCII text |
RegRipper_SECURITY.mkape | 7c4372c2a3c38bb05a1c330eb64c47ab | ASCII text |
RegRipper_SOFTWARE-Variable.mkape | 36307930d66be7716a2da6f387ed69ff | ASCII text |
RegRipper_SOFTWARE.mkape | c9c89b52a6b9c418a921f406a1635393 | ASCII text |
RegRipper_SYSTEM-Variable.mkape | 7d3ba89a2dab7795fab21e1859bbe478 | ASCII text |
RegRipper_SYSTEM.mkape | 793d8635d4d910aac3f82ce9d57ed353 | ASCII text |
RegRipper_UsrClass-Variable.mkape | beba191936fa1f6799ec6478c9cd7e49 | ASCII text |
RegRipper_UsrClass.mkape | a82be07ad324ce5b44647586d9f2dfab | ASCII text |
SEPparser.mkape | 29d102d7194e4b6e710ab6013007f265 | ASCII text |
SIDR_WindowsIndexSearchParser.mkape | 0db99a811f22bf288b627a043969cf8c | ASCII text |
SRUMDump.mkape | 4cda4fccdb8eeb5620f3e10c533af2a8 | ASCII text |
TeamsParser.mkape | 6e9e6faee3874a89e3554941c6eecf05 | ASCII text, with CRLF line terminators |
ThumbCacheViewer.mkape | 2956f3828c21612a011d571d946ab7bb | ASCII text |
VLSeeRecent_VLCRecentFiles.mkape | 7a8112bd609ad7cb793d1d9830be80dc | ASCII text |
Velocidex_WinPmem.mkape | 2633c50d0e7697d73043e1d27ae0af5b | ASCII text |
Velociraptor_KapeTargetsCollectionRestoreTimestamps.mkape | 02f0d4a96ced046413a44d1cb12c0593 | ASCII text, with CRLF line terminators |
Volatility_amcache.mkape | c31f905897ada9ab966a302519813312 | ASCII text, with very long lines (318) |
Volatility_clipboard.mkape | a2334df7c16d327e17552092978a61a3 | ASCII text, with very long lines (318) |
Volatility_cmdline.mkape | 36c4a2f3d6847ad527cf32608f71bae7 | ASCII text, with very long lines (318) |
Volatility_cmdscan.mkape | 7a80792d5057cd2dc53ebe37fd38f1bb | ASCII text, with very long lines (318) |
Volatility_connections.mkape | 5bd82ee12d2d4bb0aa6673d454f2b7f0 | ASCII text, with very long lines (318) |
Volatility_connscan.mkape | 0d6db6d2b358b1e723de99470f8f2367 | ASCII text, with very long lines (318) |
Volatility_consoles.mkape | f17ca1f869e2aa87969d3a565eb6ee62 | ASCII text, with very long lines (318) |
Volatility_dlllist.mkape | 4923d463cf5d0ac314023df22c176e26 | ASCII text, with very long lines (318) |
Volatility_driverirp.mkape | 5f9319b442ba903443ab96e7377262eb | ASCII text, with very long lines (318) |
Volatility_hollowfind.mkape | 627d6c3c79689a5864471cb77fb7f792 | ASCII text, with very long lines (318) |
Volatility_idt.mkape | 5fdb8eaef171680e4418ad5de1305c53 | ASCII text, with very long lines (318) |
Volatility_malfind.mkape | 229d03ae0b954fd047d5565aed4b5899 | ASCII text, with very long lines (318) |
Volatility_modscan.mkape | d142ecef765e670e1c6cc6a8af9926da | ASCII text, with very long lines (318) |
Volatility_modules.mkape | dca5b030e44e039c2fc6f13af6d50bb2 | ASCII text, with very long lines (318) |
Volatility_netscan.mkape | 93430c0622c4ddc9170172d216e6f2ff | ASCII text, with very long lines (318) |
Volatility_notepad.mkape | 4df38ba7469b837e5e5926c5221c7530 | ASCII text, with very long lines (318) |
Volatility_pslist.mkape | 1b49b7c76e50b7238ab0e8d99fd29cbb | ASCII text, with very long lines (318) |
Volatility_psscan.mkape | 6ece4705f00e2c9c91c06c7162084cbf | ASCII text, with very long lines (318) |
Volatility_pstree.mkape | 0f8acfa43e573020d7f2d6cc0e4431f9 | ASCII text, with very long lines (318) |
Volatility_psxview.mkape | dcb905062b52dd1fa1228dd23daea5a2 | ASCII text, with very long lines (318) |
Volatility_shimcache.mkape | 5516ba685ab5167f18bc96d27ca14fec | ASCII text, with very long lines (318) |
Volatility_sockets.mkape | f8b5012121e40ba1e63402261cee0caf | ASCII text, with very long lines (318) |
Volatility_sockscan.mkape | aa292d41eca23fa16806a657232ae9d3 | ASCII text, with very long lines (318) |
Volatility_ssdt.mkape | 644cc2a11ddc60a1d086444407d3e23f | ASCII text, with very long lines (318) |
Volatility_userassist.mkape | b549832d225120babbf7b024ca80e8a8 | ASCII text, with very long lines (318) |
Volatility_userhandles.mkape | 023e907ccc8c9a68e0e2ee5d742a8418 | ASCII text, with very long lines (318) |
WIFIPassView.mkape | 8116fc7a067a45ff02becbdb2d7c7bbc | ASCII text, with CRLF line terminators |
WMI-Parser.mkape | f9f1655e7a470f2cf84e89a1af8d0e0a | ASCII text |
Windows_Hello2Hashcat.mkape | 58b963e2d49081cde03bcbc66b5423ae | ASCII text |
Zircolite_Scan.mkape | f70079b325238850c342cb02b01c7035 | ASCII text, with very long lines (455) |
Zircolite_Update.mkape | 004b94d8a0356408f9726c2e4c5047ab | ASCII text |
hasherezade_HollowsHunter.mkape | a4d16793d702cd4d064efcb2808fb4c2 | ASCII text |
iTunesBackupReader.mkape | 92b227bb8d2e02aad02d7991821f621c | ASCII text |
log4j-scanner.mkape | 7c7f23d2d7f2a40aa6fc3dadbb5feec2 | ASCII text |
mimikatz_NTLMHashes.mkape | 77da26569475c189d2ca82128b085cb5 | ASCII text |
reg_hunter_binary.mkape | c45c2682d886a668e48484d5998aef83 | ASCII text |
reg_hunter_email.mkape | 42bea15984e4f1a4d41bd69eae3cf06d | ASCII text |
reg_hunter_encoding.mkape | ad2b0dcd1e6edd146145897dd3ab8729 | ASCII text |
reg_hunter_ip.mkape | c4f1324736e5cfb735e3d94f9940bcb0 | ASCII text |
reg_hunter_link.mkape | 74b3d07de51c1106d246f0c51c19799f | ASCII text |
reg_hunter_obfuscation.mkape | 2f49fb915454081e9e87575bc92c4328 | ASCII text |
reg_hunter_script.mkape | 0562056879b28e5877d79ee8469970d8 | ASCII text |
reg_hunter_shell.mkape | 689fd07c023650c3fae2e38253773158 | ASCII text |
reg_hunter_shellcode.mkape | 386fa0f1a60618e95636764be8996def | ASCII text |
reg_hunter_suspicious.mkape | 0f228fb4140f9a0add95bacfe4fa7bed | ASCII text |
reg_hunter_unc.mkape | 26289ccbafe731aee866ce436ab9d2ec | ASCII text |
reg_hunter_url.mkape | 404fe03bdda2a385b150e108cb002f45 | ASCII text |
KAPE_Automation.mkape | c36259941ec36758c97869087cb44035 | Unicode text, UTF-8 text |
Kaspersky_TDSSKiller.mkape | f1f744cbf20dbe447fc0df9339e71310 | ASCII text |
LogParser_ApacheAccessLogs.mkape | d845045fd6f070fd089975df775ecf3e | ASCII text |
LogParser_DetailedNetworkShareAccess.mkape | 59c6484239fe11c72c37222452cf1198 | Unicode text, UTF-8 text, with very long lines (1475) |
LogParser_LogonLogoffEvents.mkape | ab161a551309f9f5178d4a0571bc2227 | ASCII text, with very long lines (8276) |
LogParser_RDPUsageEvents.mkape | 15e933163650bc60aefa3ddbe355659c | ASCII text, with very long lines (3469) |
LogParser_SMBServerAnonymousLogons.mkape | 6f18d406caa8126403b72dbfaf607b25 | ASCII text, with very long lines (371) |
MagnetForensics_EDD.mkape | 1d90191f57c6c1dcf9ee4f5dd708e3e0 | ASCII text |
MagnetForensics_RAMCapture.mkape | 9461994bb89bdb64962bc0380936fca4 | ASCII text |
McAfeeStinger.mkape | 13b89d4f86f9cb585092968f17145457 | ASCII text, with CRLF line terminators |
NTFSLogTracker_$J.mkape | 7218d98589df902a408448b6159651bb | ASCII text |
NTFSLogTracker_$LogFile.mkape | bea14a517296d78d2e9ec64edeb06b9c | ASCII text |
NirSoft_BrowsingHistoryView.mkape | 8fc5d7531c198042b129f7f5f143fb56 | ASCII text, with CRLF line terminators |
NirSoft_FullEventLogView_AllEventLogs.mkape | 30bf172f700c1af945393c68d2c989cc | ASCII text |
NirSoft_FullEventLogView_Application.mkape | 4effec5c8bbc1a9bfd18c918458a4675 | ASCII text |
NirSoft_FullEventLogView_PowerShell-Operational.mkape | 347ec532247a64055f723c7492892b58 | ASCII text |
NirSoft_FullEventLogView_PrintService-Operational.mkape | 97a603d7d7e543a74a111ed1a0308c39 | ASCII text |
NirSoft_FullEventLogView_ScheduledTasks.mkape | 020297c3bf1a87527f564050fedf0592 | ASCII text |
NirSoft_FullEventLogView_Security.mkape | 9ce0b8e3b8164328f19fda6f19f43f8c | ASCII text |
NirSoft_FullEventLogView_System.mkape | 0ab5e96e56666c2ac6d92547f26846a6 | ASCII text |
NirSoft_TurnedOnTimesView.mkape | bad2430b79c2327a34cfb9de62cce350 | ASCII text |
NirSoft_USBDeview.mkape | 672e82cf6c3f5e6ee770f024ed108af4 | ASCII text, with CRLF line terminators |
NirSoft_VideoCacheView.mkape | d9d7a7f60d1d0f2b91806ad8110d1661 | ASCII text, with CRLF line terminators |
NirSoft_WebBrowserDownloads.mkape | 359433d1a85b7a31fa45345650934e9c | ASCII text, with CRLF line terminators |
NirSoft_WebBrowserPassView.mkape | 02ad756307e3da428198711c3fcfc339 | ASCII text, with very long lines (422), with CRLF line terminators |
Nirsoft_AllThreadsView.mkape | d3a4ecf2080140175c89b882d7b63ff0 | ASCII text, with very long lines (414), with CRLF line terminators |
Nirsoft_AlternateStreamView.mkape | c0bea86e7953614482242525cb99d72f | ASCII text, with CRLF line terminators |
Nirsoft_AppResourcesUsageView.mkape | c4afb19a43c025f088518e897b1ce6f1 | ASCII text, with very long lines (360), with CRLF line terminators |
Nirsoft_BluetoothView.mkape | 478ea70b3e8b77e552719c769c75b262 | ASCII text, with very long lines (319), with CRLF line terminators |
Nirsoft_DNSDataView.mkape | 023f6a71cb03b8dfc7efdbd5d9f64f49 | ASCII text, with very long lines (374) |
Nirsoft_FileActivityWatch.mkape | 693d75021703d780b480e68a21422c45 | ASCII text, with very long lines (369), with CRLF line terminators |
Nirsoft_LastActivityView.mkape | 8c80acfde0ab81aff6526ddf811e7fb9 | ASCII text, with very long lines (482), with CRLF line terminators |
Nirsoft_OpenedFilesView.mkape | 7502cb7ce1e9c25ddb9871519f50e564 | ASCII text, with CRLF line terminators |
Nirsoft_OutlookStatview.mkape | cc39295cd9cff7e7e37e6c9065bf9435 | ASCII text, with very long lines (487) |
Nirsoft_ShadowCopyView.mkape | 42ef52043da4fcfffb693605a027abb2 | ASCII text, with very long lines (393), with CRLF line terminators |
Nirsoft_WhatInStartup.mkape | a625b90cef83bf7929d959d0251832de | ASCII text, with very long lines (322), with CRLF line terminators |
Nirsoft_WifiHistoryView.mkape | 833d5144938eff7110e9b96d2916e174 | ASCII text, with CRLF line terminators |
Nirsoft_WinDefThreatsView.mkape | 00779a95c931635693177b77aed127aa | ASCII text, with CRLF line terminators |
Nirsoft_WinLogonView.mkape | 28b535987c5297faafb76eb6f1c63875 | ASCII text, with very long lines (383), with CRLF line terminators |
Nirsoft_WirelessKeyView.mkape | f6d0e2b85927c35d5406c5935fb376a7 | ASCII text, with very long lines (473), with CRLF line terminators |
PowerShell_5SecondPause.mkape | db3a6687b3582235c88fef59bf9c4bf0 | ASCII text |
PowerShell_log4j.mkape | 3a4d05aa9332e160c4b327a2031d2561 | ASCII text |
README.md | bc0dfd54d7af82a9462e23663e604c4d | ASCII text |
SOFELK_Parser_EvtxECmd.mkape | 9623f6dffbb130addf24457c81ce2eb6 | ASCII text |
SOFELK_Parser_LEcmd.mkape | c15dc063e87796a60b5b7f20b0fe58e6 | ASCII text |
SOFELK_Parser_MFTECmd_J.mkape | bf21b94dacaff2ef0057a27558208e88 | ASCII text |
SOFELK_Parser_MFTECmd_MFT.mkape | 647598f1cbf32fb42ac88650d120d55a | ASCII text |
SOFELK_Parser_PECmd.mkape | 1fbe0851da4ddecfb8a72e476965780c | ASCII text |
SQLite3_TeraCopy_History.mkape | 863c3179b4f66b3665e6cc0cce3572c9 | ASCII text, with very long lines (621) |
SQLite3_TeraCopy_Main.mkape | 3ac31c8638e9b2f25853c345b3da9404 | ASCII text, with very long lines (403) |
Snap2HTML.mkape | a8d5e9c230a2cfcd9d6fd5bfedaf0de6 | ASCII text |
SysInternals_Autoruns.mkape | aba20fc9557a148135bfae354f3cbdda | ASCII text |
SysInternals_Handle.mkape | a1873bbbc583272354ffda6572e80db2 | ASCII text |
SysInternals_PsFile.mkape | 796453107158119f3ed4550605e563f5 | ASCII text |
SysInternals_PsInfo.mkape | ae0501b38dbfba8419cb794e740481cb | ASCII text, with very long lines (351) |
SysInternals_PsList.mkape | fccad7a95d269f44f9a29bf340c4f3f5 | ASCII text |
SysInternals_PsLoggedOn.mkape | db00c31612ebd66511553d0785a336c6 | ASCII text |
SysInternals_PsService.mkape | 4f8e7183ea56076cc494b45afa20100f | ASCII text |
SysInternals_PsTree.mkape | e99a2b2ff5540392b73df1e2fbfe31cc | ASCII text |
SysInternals_SigCheck.mkape | 177a0aa17dcf989ed75bc9f6bed88436 | ASCII text |
SysInternals_Tcpvcon.mkape | 1d6ecd048c844bb061c7af0312811569 | ASCII text |
TZWorks_CAFAE_Registry_System.mkape | be06f72bb63634079b280bbf1e015608 | ASCII text |
TZWorks_cafae64_Amcache.mkape | 9b754afa7bfcd6ce30e438de923a756e | ASCII text, with CRLF line terminators |
TZWorks_cafae64_Background_Activity_Moderator.mkape | 4478cf8a47da5711e94bc81c882d6c69 | ASCII text, with CRLF line terminators |
TZWorks_cafae64_CODECS.mkape | f603c67cb5102f7236e26174ddaedaad | ASCII text, with CRLF line terminators |
TZWorks_cafae64_CSLIDs.mkape | 392455a72cd6d5ad5a7765116dc58f1b | ASCII text, with CRLF line terminators |
TZWorks_cafae64_Computer_Config.mkape | 8b53fca01f140f6f1cc069879d2e4fd6 | ASCII text, with CRLF line terminators |
TZWorks_cafae64_Devices.mkape | 14515d287440117e386f44b419d2ccf2 | ASCII text, with CRLF line terminators |
TZWorks_cafae64_Explorer.mkape | 87e324c42f00c0bccb85b0b59b3bef02 | ASCII text, with CRLF line terminators |
TZWorks_cafae64_InProcServer32.mkape | 86735f8aa4234034a6bcc018ddd57d58 | ASCII text, with CRLF line terminators |
TZWorks_cafae64_Installed_SW.mkape | 5adf0c4ad604a5cbfe7f0e8899175a34 | ASCII text, with CRLF line terminators |
TZWorks_cafae64_MUIcache.mkape | 4681ac16d5f9db9c7f818ecd6fefce4d | ASCII text, with CRLF line terminators |
TZWorks_cafae64_NW_Artifacts.mkape | 8cb7c77cda0f0a9134bee969b9bfbaf7 | ASCII text, with CRLF line terminators |
TZWorks_cafae64_OfficeDocs.mkape | ed128db1ffc04bf2235a5989e5082cf1 | ASCII text, with CRLF line terminators |
TZWorks_cafae64_OpenWith.mkape | 1dacdbbb4371ad41b6256fc6f60591f4 | ASCII text, with CRLF line terminators |
TZWorks_cafae64_Openrun_MRU.mkape | 4dbde467d460a2a37b119f20d9fde125 | ASCII text, with CRLF line terminators |
TZWorks_cafae64_OpensaveMRU.mkape | 1bc2615ca1c150ca9e8b9eca0ed51d4a | ASCII text, with CRLF line terminators |
TZWorks_cafae64_OtherAppsRun.mkape | c67e2938d148283cd3e2b7fb834a7173 | ASCII text, with CRLF line terminators |
TZWorks_cafae64_Persistence.mkape | cd2e12d652eb2cbc9efbab60f3b84e83 | ASCII text |
TZWorks_cafae64_Recent_Docs.mkape | 06fc7449f76d4c19a846408011b3e81e | ASCII text, with CRLF line terminators |
TZWorks_cafae64_Runkeys.mkape | 7f84b03014c42bf1bae8fb102d65a383 | ASCII text, with CRLF line terminators |
TZWorks_cafae64_SAM_Registry.mkape | 197b1db7f24fd84dcac41066253a1fee | ASCII text, with CRLF line terminators |
TZWorks_cafae64_SOFTWARE_Registry.mkape | 949c6fa3737c2611e34d8d3e9c4163c8 | ASCII text, with CRLF line terminators |
TZWorks_cafae64_SYSTEM_Registry.mkape | ba0e3c4f349b9e4794026a0822a73e8e | ASCII text, with CRLF line terminators |
TZWorks_cafae64_Services.mkape | b7e5de6729dd4e6b47107ab7d09c7474 | ASCII text, with CRLF line terminators |
TZWorks_cafae64_Shimcache.mkape | 3cae5f4c53191759cd9406ede71d5fae | ASCII text, with CRLF line terminators |
TZWorks_cafae64_System_Restore.mkape | 39044eea9e1c094c0aae4fbfc893b70f | ASCII text, with CRLF line terminators |
TZWorks_cafae64_System_Timezone.mkape | cb0265eb1e89bc60d597f493d432a357 | ASCII text, with CRLF line terminators |
TZWorks_cafae64_USER_Registry.mkape | c9d225a34ff11d5370630312bee24301 | ASCII text, with CRLF line terminators |
TZWorks_cafae64_Userassist.mkape | 6fa07512cc8814e31ea465ff60fc96e4 | ASCII text, with CRLF line terminators |
TZWorks_cafae64_Volume_Info.mkape | 1e856566aaa06630a2195b7fc7a8f72e | ASCII text, with CRLF line terminators |
TZWorks_cafae64_Web_Info.mkape | d76ca6c5d2bcd8575aa49e761548e75f | ASCII text, with CRLF line terminators |
TZWorks_csp64_Chromium_Browsers.mkape | 6b7bb816f4ddd16ce28dc398f4c20ca3 | ASCII text, with CRLF line terminators |
TZWorks_evtwalk64_EventLogs.mkape | b65574c3ed9a7d17ead91b690be6e5bb | ASCII text, with CRLF line terminators |
TZWorks_evtwalk64_EventLogs_ApplicationEvents.mkape | 700a9ff6c1fd30e49836de5705753dd9 | ASCII text |
TZWorks_evtwalk64_EventLogs_Creds.mkape | 3526275d53c164a92465c11705047686 | ASCII text, with CRLF line terminators |
TZWorks_evtwalk64_EventLogs_Logon.mkape | c911d7a29410aef1585a4ae3f983e040 | ASCII text, with CRLF line terminators |
TZWorks_evtwalk64_EventLogs_PWChange.mkape | 1fca1f0efaa937c176b93d4bec20707c | ASCII text, with CRLF line terminators |
TZWorks_evtwalk64_EventLogs_ScheduledTasks.mkape | bef03461a4cc0ddd6291adf97083784e | ASCII text |
TZWorks_evtwalk64_EventLogs_Startstop.mkape | 766e05a620bbed49a4d88ade80ee86f2 | ASCII text, with CRLF line terminators |
TZWorks_evtwalk64_EventLogs_TimeUpdate.mkape | 5d25d5747120b7148ca907021dd31531 | ASCII text, with CRLF line terminators |
TZWorks_evtwalk64_EventLogs_USB.mkape | e604e9249c5049856320138227291097 | ASCII text, with CRLF line terminators |
TZWorks_jmp64_Jumplists.mkape | 87865120b9161b5b86d64bc621493158 | ASCII text, with CRLF line terminators |
TZWorks_jp64_USNJrnl.mkape | 38e4046c46c5d7f13b0c27b85a9710ba | ASCII text, with CRLF line terminators |
TZWorks_lp64_Shortcuts.mkape | d422e8f19735e625f12d1558da27ba90 | ASCII text, with very long lines (350), with CRLF line terminators |
TZWorks_mala64_Logfile.mkape | 0c32cffc74e4822ef8bdc8ffaf4d664f | ASCII text, with CRLF line terminators |
TZWorks_ntfswalk64_MFT.mkape | 7b27873019944e28ed21ad68851ea8ce | ASCII text, with CRLF line terminators |
TZWorks_pf64_Prefetch.mkape | d100c7c8e303f15bb9f012a1800b9331 | ASCII text, with very long lines (329), with CRLF line terminators |
TZWorks_sbag64_Shellbags.mkape | 2666cd3f6a467c571ea61729821ff822 | ASCII text, with very long lines (363), with CRLF line terminators |
TZWorks_tac64_ActivitiesCache.mkape | cbd49a7ff9c163922d586f31f6029fc4 | ASCII text, with very long lines (328), with CRLF line terminators |
TZWorks_usp64_USBArtifacts.mkape | f8a0eec85225b4b51682ac6a1fcd2adf | ASCII text, with very long lines (342), with CRLF line terminators |
TZWorks_wacu64_AppCompatibility_Cache.mkape | 812584a9ca99650aa7c9bae8cfcf03d4 | ASCII text, with very long lines (330), with CRLF line terminators |
Thor-Lite_LiveResponse.mkape | 86bb5dec00fb5078a9819eaeb62b5840 | ASCII text |
Thor-Lite_LiveResponse_Lookback30days.mkape | 25cb4210399965b33b25562d5c9d6b0d | ASCII text |
Thor-Lite_Scan.mkape | 24bd26fef03e96bef4aed23c9f8e8775 | ASCII text |
Thor-Lite_Upgrade.mkape | f763891a4bec73d75848cb78cb6bfd1a | ASCII text |
Thor_Scan.mkape | 35951f9da2b6a7bf98a7a6d83dd179fe | ASCII text |
Thor_Upgrade.mkape | 01b9674a17ba8a6f01ca35eea56ccc29 | ASCII text |
Winlogbeat_ALL.mkape | feefe20c83c390b381c7aea4c10ff698 | ASCII text |
!!ToolSync.mkape | e5bd30f72bfb382efee50c68e7c51220 | ASCII text |
!EZParser.mkape | 56c5b85413b11eca1721bc376899c042 | ASCII text |
Events-Ripper.mkape | 0eb488afce2131e7f10142d83240a4c1 | ASCII text, with CRLF line terminators |
Hayabusa.mkape | 4681de11a114f768d1106a79b89df477 | ASCII text |
KapeResearch_Registry_JSON.mkape | fa9d6116b9eeb3b41058fc4afcffaf1d | ASCII text |
LiveResponse_NetSystemInfo.mkape | a6e6df4e1ab825a1a865e33aa54a651d | ASCII text |
LiveResponse_NetworkDetails.mkape | 8b1dad264fe27f60512a66b7fa771e83 | ASCII text |
LiveResponse_ProcessDetails.mkape | d3a5f84fd279660595887ac198193c9c | ASCII text |
LogParser.mkape | 924101236e8d9060e4cfbc6425db7dd7 | ASCII text |
MFTECmd.mkape | c775b4d3f95d1ef2c19646da80cdf753 | ASCII text |
NTFSLogTracker.mkape | 8e9c4944ed8f200e9346673c1afb8158 | ASCII text |
PowerShell_LiveResponse_SystemInfo.mkape | 0c43536d2b5626be6107b4328d4ae702 | ASCII text |
RECmd_AllBatchFiles.mkape | f657e901f3dc89c98061c6caa803d207 | ASCII text |
RegRipper.mkape | 1a2cd9402610b960976487ce574f1ff8 | ASCII text |
Reghunter.mkape | 549c449dbc213186f35ed1f448982f27 | ASCII text |
SOFELK_Parser.mkape | 4010170424fea483665fe379f5932255 | ASCII text |
Volatility_Disabled.mkape | d599caaf5ae81fb3d61f4592f97af7b5 | ASCII text, with very long lines (318) |
bstrings.mkape | 615912c68dbd9d41c74554c1eefa66f4 | ASCII text |
bstrings_CryptoWallets.mkape | 7e50275c1dd963cb62bb0079bb7b203e | ASCII text |
CompoundModuleGuide.guide | b35821db56c7331519cc55e0408b0392 | ASCII text |
CompoundModuleTemplate.template | d16df3ed126416e5651cb0ab48fc1c6f | ASCII text |
AmcacheParser.mkape | ce453ce59a32e1308e44001844d88607 | ASCII text |
AppCompatCacheParser.mkape | 4a634f0878c90f0bbb3f3e90da1eb1ee | ASCII text |
EvtxECmd.mkape | 94a780432ecebf768b230ff2d9f5291b | ASCII text |
EvtxECmd_RDP.mkape | 290277cbba3ba49dc36fe632d3d988dd | ASCII text, with very long lines (494) |
JLECmd.mkape | 4e0a49d3ad82bbb2268fa30304b50e8e | ASCII text |
LECmd.mkape | b0f3ccf0d6a763240f64f175bbb68af3 | ASCII text |
MFTECmd_$Boot.mkape | 44c440f5f222a1ef82fabb11f4b7e9d5 | ASCII text |
MFTECmd_$I30.mkape | bc7043634f72c956361157a25eca4c5e | ASCII text |
MFTECmd_$J.mkape | 880093dfb0cb6a964c2cd0a01e3eea2d | ASCII text |
MFTECmd_$MFT.mkape | 70114f8b76c1b07c1403d9b1b7694587 | ASCII text |
MFTECmd_$MFT_DumpResidentFiles.mkape | 06eba1c5547b6d8873928f82feeb11cc | ASCII text |
MFTECmd_$MFT_FileListing.mkape | 0fc996ce958c990685d54c6e48732533 | ASCII text |
MFTECmd_$MFT_ProcessMFTSlack.mkape | d127f1b82a335bd1c4ce03afc277d45a | ASCII text |
MFTECmd_$SDS.mkape | d7d03376f1fa16e7dde8aaf744f9a2de | ASCII text |
MFTECmd_BulkExtractorCarvedMFTRecords.mkape | 3568486a935a22afc91174cd2d9dda5e | ASCII text |
PECmd.mkape | c92ad16f550fb1d9f7a3f6dc4aa2790b | ASCII text |
RBCmd.mkape | 881fdbdfe0e36e41dcfacc6c29a1d858 | ASCII text |
RECmd_AllRegExecutablesFoundOrRun.mkape | 9db651bc51c7f1656ad70be81a5639e5 | ASCII text |
RECmd_BCDBootVolume.mkape | af9b8acec40c793ce542103486310b7a | ASCII text |
RECmd_BasicSystemInfo.mkape | aea7b0080f8a4f9e8a03e083aa2ba955 | ASCII text |
RECmd_DFIRBatch.mkape | 0b53a5278fe0da011d5a12d06f626275 | ASCII text |
RECmd_InstalledSoftware.mkape | 1d0f7c1070f7c944e2d4e3b62a700945 | ASCII text |
RECmd_RECmd_Batch_MC.mkape | 8e79d2beb51f1a1e7d6c4e22eb417808 | ASCII text |
RECmd_RegistryASEPs.mkape | 273a7653d97ecb4cd7950ab075dc2678 | ASCII text |
RECmd_SoftwareASEPs.mkape | 509866cd0aa996af6aa3928405a4bfa4 | ASCII text |
RECmd_SoftwareClassesASEPs.mkape | bf4395ce3c92079157d72e4ce9dde09b | ASCII text |
RECmd_SoftwareWoW6432ASEPs.mkape | 027b2b5965dc01950c8fee91634a40c9 | ASCII text |
RECmd_SystemASEPs.mkape | afe96f8526052a7d276443cacd576edf | ASCII text |
RECmd_UserActivity.mkape | 03b1ee177d61453fa0a0ed5ad23e7758 | ASCII text |
RECmd_UserClassesASEPs.mkape | 621a39d81ecf4430c8896f8422809d50 | ASCII text |
RecentFileCacheParser.mkape | bf5c0acbd5f39a6b3ce5839024a9c82b | ASCII text |
SBECmd.mkape | c92a48221adbda2bcc57b42daed195b4 | ASCII text |
SQLECmd.mkape | d1935b9419a5623917511537cb4a44ee | ASCII text |
SQLECmd_Hunt.mkape | 98f255001767537654084d678741764d | ASCII text |
SrumECmd.mkape | f117e395e6409b9ba3058de0d65df773 | ASCII text |
SumECmd.mkape | 8c9ce40e6dbea0b9f0bb9c9580757a74 | ASCII text |
WxTCmd.mkape | ccfa21364698b050597226d2620fc51e | ASCII text |
bstrings_AeonWallet.mkape | 9a85ad1e47a810a8eca240a758dfa0b1 | ASCII text |
bstrings_BitCoinWallet.mkape | ca09c714e1dcccb38767d6acd37f2922 | ASCII text |
bstrings_Bitlocker.mkape | 9d9bd59b5430cd7815ce6a2b7b4fd467 | ASCII text |
bstrings_ByteCoinWallet.mkape | eac9f20207758ab33cd14cc1017bd868 | ASCII text |
bstrings_CreditCards.mkape | 97dd8740dfbf2f556cd07797741c244d | ASCII text |
bstrings_DashCoinWallet.mkape | 0a92e636a2148c6d3a20285430b5f603 | ASCII text |
bstrings_DashCoinWallet2.mkape | 3919073be3b3d5ae0be61e07dd55bbfd | ASCII text |
bstrings_Email.mkape | e2db752b42556bbfeca2cf5c052dbc93 | ASCII text |
bstrings_FantomCoinWallet.mkape | 651ff992fd0f1d0717cf98c27895344a | ASCII text |
bstrings_IPv4.mkape | dfde4820d42587edbdcaebfd7d26ab4d | ASCII text, with very long lines (305) |
bstrings_MACAddresses.mkape | ff199efe3b5d0896dc9062ff6f905fe6 | ASCII text |
bstrings_MoneroWallet.mkape | 66a2947ef94fcc39ee410b752207a0b3 | ASCII text |
bstrings_SSN.mkape | dd29df233b477f2cd6bee2e88b902227 | ASCII text |
bstrings_SumoKoinWallet.mkape | 6bb962e3e63d71fab9700044083ad0c2 | ASCII text |
bstrings_UNC.mkape | 04d02ba6353afd96f4ee3c0057436bda | ASCII text |
bstrings_URLs.mkape | c670fe68aad7ce4636aa6fc0d1377f19 | ASCII text |
bstrings_USPhone.mkape | ded04016cedb3a8dfca89c6f3ff159ba | ASCII text |
bstrings_WinPath.mkape | a470508006478dc4b1e7a00bb61a59fd | ASCII text |
bstrings_ZipCodes.mkape | bef160a5c80fca5807405ccf4abe9c20 | ASCII text |
iisGeoLocate.mkape | f21400bb4b3487251c577b45060e2b3e | ASCII text |
KapeResearch_EventLogs_XML.mkape | 49899b633875d2002e362edcf34f91d3 | ASCII text |
KapeResearch_Registry_Amcache_JSON.mkape | c30644342180a5267cbfb7817a4fb88c | ASCII text |
KapeResearch_Registry_BBI_JSON.mkape | cf601ca57f289e0461d5c28ceecca12c | ASCII text |
KapeResearch_Registry_BCD-Template_JSON.mkape | 4d9b28b771aa771762d6d43e254f7c70 | ASCII text |
KapeResearch_Registry_COMPONENTS_JSON.mkape | 622348bfdd682ab24d39902fc0cb1824 | ASCII text |
KapeResearch_Registry_DEFAULT_JSON.mkape | 3e4311f328edc38db5a4fa12588ac5db | ASCII text |
KapeResearch_Registry_DRIVERS_JSON.mkape | f9def76ed4f92999c680b9ab506d3a95 | ASCII text |
KapeResearch_Registry_ELAM_JSON.mkape | dc8f1e8539757924be35925756f37cff | ASCII text |
KapeResearch_Registry_NTUSER_JSON.mkape | 6b22dd266bb7e4551bdf7779f5feb94b | ASCII text |
KapeResearch_Registry_SAM_JSON.mkape | a60a45efda588407e6422f5af6b232da | ASCII text |
KapeResearch_Registry_SECURITY_JSON.mkape | dc47a188192718172bc648b49de0d5be | ASCII text |
KapeResearch_Registry_SOFTWARE_JSON.mkape | 8135e8a2dfd3a86963a92749d63b1522 | ASCII text |
KapeResearch_Registry_SYSTEM_JSON.mkape | 624fe79787c6e870837fe86147e1b19e | ASCII text |
KapeResearch_Registry_SysCache_JSON.mkape | 1e049f947c74830a0a8f49493c7c72dd | ASCII text |
KapeResearch_Registry_UsrClass_JSON.mkape | 4ddcb388c79cefde0f176948e28ce2df | ASCII text |
KapeResearch_Registry_VSMIDK_JSON.mkape | 793265185a4689c35cc87ccfbfd4d495 | ASCII text |
KapeResearch_Registry_userdiff_JSON.mkape | 2d303d389de8bf3eed029599edd8f43a | ASCII text |
Sync_EvtxECmd.mkape | c3406a79836c7f3ebf8f3ba42532856b | ASCII text |
Sync_KAPE.mkape | 494e164ecbad2dc81b304d59713260c5 | ASCII text |
Sync_RECmd.mkape | 699fb0b085fe668c9e6734708874f41a | ASCII text |
Sync_SQLECmd.mkape | 0f9129ea1c4f8f39b51438dfb679e9da | ASCII text |
ModuleGuide.guide | 36c2308234210d516f29ca47953f50d5 | ASCII text, with very long lines (305) |
ModuleTemplate.template | c2cd335326e8e48a416a9f2118451d66 | ASCII text |
README.md | e6861977b945439b5d6852e3251a389c | ASCII text |
PowerShell_Arp_Cache_Extraction.mkape | 5587cac3c890a1cb7fa082679c64f0b3 | ASCII text, with CRLF line terminators |
PowerShell_Bitlocker_Key_Extraction.mkape | 4fb9d2bf84095ac57a260b4f532804f3 | ASCII text, with CRLF line terminators |
PowerShell_Bitlocker_Status.mkape | 0cc670e2015bba014144b9820f0956e8 | ASCII text, with CRLF line terminators |
PowerShell_DLL_List.mkape | d69600eeac825ea72929dff03c98b7e4 | ASCII text |
PowerShell_Defender_Exclusions.mkape | b3d2bf8f4c6942a72e43b80c16b3e91c | ASCII text |
PowerShell_Dns_Cache.mkape | 8c036df52ef4da0e51cd757180539d92 | ASCII text, with CRLF line terminators |
PowerShell_LocalAdmin.mkape | c5266493e91a5e2d4efed152744edf37 | ASCII text, with CRLF line terminators |
PowerShell_Local_Group_List.mkape | b0f3f384ddd3fe01a7ff860f54af2e50 | ASCII text, with CRLF line terminators |
PowerShell_NamedPipes.mkape | 4e4058beb8240a49fb6d95e9cbbe8c5c | ASCII text |
PowerShell_NetUserAdministrators.mkape | 4f7261f277a6dcae8dca1b75ba758612 | ASCII text |
PowerShell_Network_Configuration.mkape | d787b9f4d0fbf8180ab09f028c1f037e | ASCII text, with very long lines (442), with CRLF line terminators |
PowerShell_Network_Connections_Status.mkape | 4139a55b8f4edaffd6ea31e3c3aed5e5 | ASCII text, with very long lines (304), with CRLF line terminators |
PowerShell_Network_Share.mkape | d35456e2a0bb9589abf38b63b3bd5f7b | ASCII text, with CRLF line terminators |
PowerShell_ParseScheduledTasks.mkape | a7965e658235dd792ea23e5b27029b7a | ASCII text, with very long lines (1424), with CRLF line terminators |
PowerShell_ProcessList_CimInstance.mkape | 762523005388937ff06b3a2b8b94eb77 | ASCII text, with very long lines (357) |
PowerShell_ProcessList_WMI.mkape | 1b199403e4be769d89642acbdc5ae985 | ASCII text, with very long lines (1287) |
PowerShell_Process_Cmdline.mkape | 981cf9e355d5bb6e977014bcf8d74752 | ASCII text |
PowerShell_SMBMapping.mkape | 6169110c00ea471db0fd67f357a1380e | ASCII text, with CRLF line terminators |
PowerShell_SMBOpenFile.mkape | 6e0f8b0dda4d0f7a4783cdb5480ad712 | ASCII text, with CRLF line terminators |
PowerShell_SMBSession.mkape | d978aba521ce7ef6f7c7b4eebc7fd8ad | ASCII text, with CRLF line terminators |
PowerShell_Services_List.mkape | c024a1b48db9b13396ee22c3d5012d75 | ASCII text, with CRLF line terminators |
PowerShell_Startup_Commands.mkape | 79730ba91439d2cb46e7d3fb46da1894 | ASCII text |
PowerShell_User_List.mkape | 2a1c8c41b1546310ce5990d509127028 | ASCII text, with CRLF line terminators |
PowerShell_WMIRepositoryAuditing.mkape | c4851b95e096788bb236c411cd56a164 | ASCII text, with very long lines (372) |
Powershell_Wireless_Network_Connections.mkape | fb3449907fb2d9fd36b77cdd7fa0853f | Unicode text, UTF-8 text, with very long lines (400) |
Windows_ARPCache.mkape | 68b67be41ad097b0505220f384aa7887 | ASCII text |
Windows_DNSCache.mkape | 1538c0a464d5d58c7975233ee8b9022b | ASCII text |
Windows_GpResult.mkape | e5cb1a80f38eab85c9bc301eb20de5e4 | ASCII text, with CRLF line terminators |
Windows_IPConfig.mkape | 5274927ad218eb0c896835bd666e9090 | ASCII text |
Windows_ManageBDE_BitLockerKeys.mkape | 9973b8e293ab19752a0cbf71a055b4ca | ASCII text |
Windows_ManageBDE_BitLockerStatus.mkape | bd55fbdcff421fb20d91026000b1e3c8 | ASCII text |
Windows_MsInfo.mkape | 9e0b8e4328a9b2ec985962f1b446482b | ASCII text, with CRLF line terminators |
Windows_NetStat.mkape | 1b0c4e00020455348a334b07f90e1e62 | ASCII text |
Windows_Net_Accounts.mkape | d3816f61fb7695e0929c03037195be43 | ASCII text |
Windows_Net_File.mkape | e5b9cf98ef6515c61602dc5cc134e7d8 | ASCII text |
Windows_Net_LocalGroup.mkape | 66028f9e156ce965af19e941a9e65de2 | ASCII text |
Windows_Net_Session.mkape | 52e0cbc25c28db4a183ff653a08fdda6 | ASCII text |
Windows_Net_Share.mkape | 28514c49403b0d2eac34d0960382316a | ASCII text |
Windows_Net_Start.mkape | c1d173e6a6f4a963f76f7c07e1aee966 | ASCII text |
Windows_Net_Use.mkape | 64b3cc603fec640cee8f4c99a6b23732 | ASCII text |
Windows_Net_User.mkape | e3a6e2cfa24032986dc684f785e843f4 | ASCII text |
Windows_RoutingTable.mkape | ef37b93d74e5dfa5e9eb6713d4052bc1 | ASCII text |
Windows_SystemInfo.mkape | ac8e10929d7f6fff2747b8b94a023012 | ASCII text |
Windows_nbtstat_NetBIOSCache.mkape | b7e12050dfe910e898d176ddd2da39a5 | ASCII text |
Windows_nbtstat_NetBIOSSessions.mkape | 57c1275868f542d35cdfab0741bd311a | ASCII text |
Windows_netsh_portproxy.mkape | 31b9c860c7aab11de8738c989f6c4e79 | ASCII text |
Windows_qwinsta_RDPSessions.mkape | a43ca741bea0580d32c92749d05e9147 | ASCII text |
Windows_schtasks.mkape | ee8e5b4e8d991c723f23d7a009aab350 | ASCII text |
README.md | 4845eecbaf5de4794560b693a38072d0 | HTML document, Unicode text, UTF-8 text, with very long lines (315) |
!KapeTriage.tkape | e099a8c81f0b92d3b468fee05c7eb042 | ASCII text |
AppData.tkape | b9abdc8ddac9b00abf4e2e99c49240d9 | ASCII text, with CRLF line terminators |
DirectoryTraversal_AudioFiles.tkape | 8cb3a33cca066057ddf7bc5d06f1fe8e | ASCII text |
DirectoryTraversal_ExcelDocuments.tkape | b225b5b80fd9dc5887576cd442dd2343 | ASCII text |
DirectoryTraversal_PDFDocuments.tkape | c7e90b77953c0525409a8c8138578792 | ASCII text |
DirectoryTraversal_PictureFiles.tkape | af86e59fee3d659b5bd82e08fdada2fc | ASCII text |
DirectoryTraversal_SQLiteDatabases.tkape | 8af0161561e8ced62fd93e1580ee64f7 | ASCII text |
DirectoryTraversal_VideoFiles.tkape | 6f8255ba2bd7a08714056333a7371d59 | ASCII text |
DirectoryTraversal_WildCardExample.tkape | f3eeed77adc9fa814c05bdd8783392d6 | ASCII text |
DirectoryTraversal_WordDocuments.tkape | a4c466852d21b719ed6663e8aceef1cc | ASCII text |
LiveUserFiles.tkape | 0502ca62944aa1c7d292e1b81dd30916 | ASCII text |
AVG.tkape | eee8dd38cf20dcb1b5c9eae299c754a6 | ASCII text, with CRLF line terminators |
Avast.tkape | b999dee150e842f336ce61f878b174b8 | ASCII text |
AviraAVLogs.tkape | d3fdd7a537f7fd8a433b27cda9d70f07 | ASCII text |
Bitdefender.tkape | bfe5d4cb90c05c3ce7d362d984b86241 | ASCII text |
Combofix.tkape | 9eaa6b89219a92551c144e50e743c504 | ASCII text |
Cybereason.tkape | ab0246df02a58d79856006111cf6714f | ASCII text |
Cylance.tkape | 4ec66d03ef51162a97faf9dbc7f4aad6 | ASCII text |
ESET.tkape | 37b7da1e223a5046b97f357d5799c806 | ASCII text |
Emsisoft.tkape | 7bed8fa8a151836dd9d6e006d40f5426 | ASCII text, with CRLF line terminators |
FSecure.tkape | 48f0dda3d6287fdf4608d6c4bc010e1c | ASCII text |
HitmanPro.tkape | 06084ccdd164e02e50173e1b2bb67f26 | ASCII text |
Malwarebytes.tkape | 4b3ac5e52f9271def13a09d002219fa0 | ASCII text |
McAfee.tkape | 841310ebada24f557c429ce6f8dc0afc | ASCII text |
McAfee_ePO.tkape | f255d2da120790728bdb34164c58a5c0 | ASCII text |
MicrosoftSafetyScanner.tkape | c41eab40416fdd4f10a8cae19febe229 | ASCII text |
RogueKiller.tkape | af94d6d3e6e1067bbb13d1e0632d2b2e | ASCII text |
SUPERAntiSpyware.tkape | 2e6070b9251b3d24fc478bf5929a1894 | ASCII text |
SecureAge.tkape | d85b318b2f0d46ab276f1e3a84e84b0a | ASCII text |
SentinelOne.tkape | 5c638a4c861386061f3309e02a69a2f1 | ASCII text |
Sophos.tkape | 2ba278abade7bc0272c705cdfacb5437 | ASCII text |
Symantec_AV_Logs.tkape | 752cd3a36f15d03d01f5f2b2c14f4640 | ASCII text |
TotalAV.tkape | 58f1654a5a3235ada67d6ab2a36c839f | ASCII text, with CRLF line terminators |
TrendMicro.tkape | fceab95544d50d200cec71b2363b0356 | ASCII text |
VIPRE.tkape | 5d4e15d1b038bc59249e18bfaf7bb233 | ASCII text |
Webroot.tkape | ac2f6ee8ac68d2f76d9baa5bce73a802 | ASCII text |
WinDefendDetectionHist.tkape | 7d7c5bad60bb254dc43ff1b735adcd0d | ASCII text |
WindowsDefender.tkape | 6b7d786c562d83d86ea89f7e4b38dd76 | ASCII text |
1Password.tkape | 4933bf28c68cda01d4fcc2aae62542e3 | ASCII text |
4KVideoDownloader.tkape | 77135986b5d3ec9402bee8fd55636e2d | ASCII text |
AceText.tkape | 012b48d6475d7d0047e3f0ce1fea3d8e | ASCII text |
AcronisTrueImage.tkape | cfaaa676986088c96a2eceeaf6ef5018 | ASCII text |
Action1.tkape | 1c8b470f399d4eda65aa0c06f8c6d6ea | ASCII text |
AgentRansack.tkape | 11d1904c1817cfc35756f0163e3dcb7d | ASCII text |
Ammyy.tkape | 1b2acac2993bcc488ada368b1867badb | ASCII text |
AnyDesk.tkape | 3dc9016ed975297433203fd4ae09ee1e | ASCII text |
AsperaConnect.tkape | 70822a02c647c424dc38309c157ea30a | ASCII text, with CRLF line terminators |
AteraAgent.tkape | 684347d75eaa686cd0fb73e6d4ff481a | ASCII text |
BoxDrive_Metadata.tkape | dd6efbeb94047f7e0194d8e0b721565d | ASCII text |
BoxDrive_UserFiles.tkape | 5be58762952653c9c1efba7059b6b33f | ASCII text |
CiscoJabber.tkape | 82a8b9cc76575476968f9385eafa4799 | ASCII text |
ClipboardMaster.tkape | eb7481ebc913f9eae0e0480c081423a5 | Unicode text, UTF-8 text |
ConfluenceLogs.tkape | 97ee212fea1e57b01f58598831afede3 | ASCII text |
DWAgent.tkape | a026139b85b741a548843222f3b0a3c4 | ASCII text |
DirectoryOpus.tkape | 7388b9c69c25b6c4d7e87f51e06981c7 | ASCII text |
Discord.tkape | aa2d18297ff0e672e237696609826daf | ASCII text |
DoubleCommander.tkape | 136db0da026300458a6e4fe2358d161b | ASCII text |
Dropbox_Metadata.tkape | 7984f4226a464b7be95ada7087a16c46 | Unicode text, UTF-8 text, with very long lines (400) |
Dropbox_UserFiles.tkape | abfd960faaab0a61de1cd43a990230e7 | ASCII text |
EFCommander.tkape | 33356430febf4338b248ae3a0afb6f3a | ASCII text |
Evernote.tkape | 41adcfcfb4c8099628cc5dbb5a1636c8 | ASCII text |
Everything (VoidTools).tkape | 024bb0d4d6161286964c07524720ef98 | ASCII text |
Fences.tkape | 9d033e2fa7be1ada9f9277d72b6e0eb9 | ASCII text |
FileZillaClient.tkape | c7bb172a4d9231664a379fbf9910bc52 | ASCII text |
FileZillaServer.tkape | 14a16c03d8d0df1e261b05f46169a4ba | ASCII text |
FreeCommander.tkape | 46ab1aaa5229d195489bb6cf756c2bf9 | ASCII text, with very long lines (337) |
FreeDownloadManager.tkape | 5d09d14cda4678893805ada723606591 | ASCII text |
FreeFileSync.tkape | 54b085e0ecc816e13de83f3ce29eeff2 | ASCII text, with CRLF line terminators |
GoogleDriveBackupSync_UserFiles.tkape | 0fd562d234846a2cf884f10be35f2cb8 | ASCII text |
GoogleDrive_Metadata.tkape | 230575f2af4ac4fa8cd5985580512233 | ASCII text |
GoogleEarth.tkape | a8dea3b3e5fb481dc28b4ea8af2a84db | ASCII text |
HeidiSQL.tkape | bbffb8172283fddab600f4647efa600d | ASCII text |
HexChat.tkape | 84a78009b45c775ca736ba506502ace4 | ASCII text |
ISLOnline.tkape | f25bef1f60e3f989801153f0c2f8b2c7 | ASCII text |
IceChat.tkape | 952a503db46fea2a0568ac631913f94e | ASCII text |
Idrive.tkape | 043fe369127305cc2527c4ffa674db91 | ASCII text |
ImgBurn.tkape | 220291aed35ce85c8717f90db98c752c | ASCII text |
IrfanView.tkape | 1d7a45403dc61e4a9631b09150625380 | ASCII text |
JDownloader2.tkape | 6726918e27d94e053f54cc7b23c3d0d3 | ASCII text |
JavaWebCache.tkape | fa60deb4ecee08e399ad19222e6b6279 | ASCII text |
Kaseya.tkape | e2d8170510ad4c79136306023bf94d80 | ASCII text |
Keepass.tkape | 48d39019cf4f4c31e56a6dd158aecd00 | ASCII text, with very long lines (403), with CRLF line terminators |
KeepassXC.tkape | af5f797b3897f3877687dbc14f873564 | ASCII text, with CRLF line terminators |
Level.tkape | 562999dc047febc97fadc3429e81e80c | ASCII text |
LogMeIn.tkape | 94fd1bf03fcc60ba99ba9b1401d631f4 | ASCII text |
MacriumReflect.tkape | 74f15192841bf2e7e381ed448b7af1d6 | ASCII text |
Mattermost.tkape | 80bc93c9a355699da78089d3b099c388 | ASCII text |
MediaMonkey.tkape | 8eff34fd1d393070b7ad4ebfdc30f47d | ASCII text |
Megasync.tkape | e3707fc84f7f98ab3077996cd627a2ae | ASCII text |
MeshAgent.tkape | eb9450e35094ad49340d66afbd589c2b | ASCII text |
MicrosoftOneNote.tkape | 36e91bca163da53a4113f10e15947bc6 | ASCII text |
MicrosoftStickyNotes.tkape | e26081037c693a37a54b5436e176ec6a | ASCII text |
MicrosoftTeams.tkape | 80a05e6a983df3f672e85b79b59c603f | ASCII text |
MicrosoftToDo.tkape | 39a50380b9178a4c223201f1cd61250d | ASCII text |
MidnightCommander.tkape | 6d57e4b5196ba41d86ea798bf8a62787 | ASCII text |
MultiCommander.tkape | 05363658ccdb4ee9bfd8fefc2575680a | ASCII text |
Nessus.tkape | 3654743b12e10acbd71116da201acd97 | ASCII text |
NetMonitorforEmployeesProfessional.tkape | 007da95c16c50d75c696f538d0dcf380 | ASCII text |
Notepad++.tkape | adbfe3e79e2e472a04cff91a0141d050 | ASCII text |
Notion.tkape | 0246301fb10b714b9580c43db70d5132 | ASCII text |
OneCommander.tkape | 1be455d57851e9f0508722383e5e5e39 | ASCII text |
OneDrive_Metadata.tkape | be367d916a5db616e362821c44ea111c | ASCII text |
OneDrive_UserFiles.tkape | 1558dae3f290cc06beab763561f35c42 | ASCII text |
OpenSSHClient.tkape | b4ac7573b4bb7bb5e5dda1d24ae7370d | ASCII text |
OpenSSHServer.tkape | a42660c42992d09129c554de04ffc66a | ASCII text |
OpenVPNClient.tkape | 0fc0623a4b3cb151fefad3aecfcd61be | ASCII text, with CRLF line terminators |
OutlookPSTOST.tkape | 9c34f85dbb42faba109bed4ea91eb9b1 | ASCII text |
PeaZip.tkape | d4d3deca471723566dfee252a20cd1af | ASCII text |
ProtonVPN.tkape | 53b4b36a62c5396251669d1a7f3c6e2e | ASCII text |
Q-Dir.tkape | 00bb65821e431fae3aca30166e8a7e1a | ASCII text |
QFinderPro (QNAP).tkape | d4581054b77ebbffd0146145253f3eda | ASCII text |
QlikSense.tkape | e14888ac4b6227c7bc7f52dd1ddccb7d | ASCII text |
Radmin.tkape | e3981e7add161393c647f927d7163fcc | ASCII text |
RcloneConf.tkape | 5e44a522e90ed658b5a23c180fbcd4b7 | ASCII text |
RemoteUtilities_app.tkape | c63c9068b44188cef2c30f818a001c16 | ASCII text |
Robo-FTP.tkape | 0468bda5c35f2689f10fb9bcfff763c2 | ASCII text |
RustDesk.tkape | 954dba5cdda160617ae3e09088f1f51f | ASCII text |
ScreenConnect.tkape | 9d73dcb41d5350d0f20e523236ceeaac | ASCII text |
ShareX.tkape | 85d2418a2987739e9a892cfdd9d4f2dd | ASCII text |
SiemensTIA.tkape | f0531a1eb5fbc0bd28b341a2c49eed7d | ASCII text, with CRLF line terminators |
Signal.tkape | db2e7f09cfcb23868ae03f85191e2f64 | ASCII text |
Skype.tkape | 7f0f0be0dba779b12839a60eec27c273 | ASCII text |
Slack.tkape | 243a1c9ac1cb2939154e61216e064255 | ASCII text |
Snagit.tkape | c98dbd40b42f7f0b2af44e329c959667 | ASCII text |
SpeedCommander.tkape | 265b3c002ed1628c878bfb1300850956 | ASCII text |
Splashtop.tkape | a6f114879961a244e19a41604bc0643b | ASCII text |
Steam.tkape | 450708d662c8d91db3fae66700e9f43a | ASCII text |
SublimeText.tkape | f866de03946443bcdc4e016c9c10fa5a | ASCII text, with CRLF line terminators |
SugarSync.tkape | 2bb926078d8be1545e353a9799730651 | ASCII text |
SumatraPDF.tkape | a746bc8d40c2847e8503c087d24a22fd | ASCII text |
SupremoRemoteDesktop.tkape | 2d2af626d72dda2a012aa9fccc53e9eb | ASCII text |
TablacusExplorer.tkape | afb9640ba1d595f27a4de4bc4575887e | ASCII text |
TeamViewerLogs.tkape | 5f45eb3f6e56603dd0c579702102e768 | ASCII text |
Telegram.tkape | c86cc01a67fb4ff1d9c1dc4c6a9d1047 | ASCII text |
TeraCopy.tkape | 7ed092a2a9d9536aa8be1752a154d5c3 | ASCII text |
Thunderbird.tkape | 4537ec80e47ffd2a25e430ce7ba6f7ce | ASCII text |
TotalCommander.tkape | ce448b732dd511501c7908870a68144f | ASCII text |
TreeSize.tkape | 7cf37a595e0a6463be32f288abd55b6f | ASCII text |
UEMS.tkape | e6f3092cfc4a5519a09be2ed8e1ef8dd | ASCII text |
Ultraviewer.tkape | cb495f60b2fc536dd9f7996e7f8d571e | ASCII text |
VLC Media Player.tkape | 2c05a4bda7a04db893b0b417b397c37f | ASCII text |
VMwareInventory.tkape | c607be935bb81613ffa4768d65438048 | ASCII text |
VMwareMemory.tkape | 39de8b9917e8779796632750f437418e | ASCII text |
VNCLogs.tkape | e67a451724d3f6420f2ec6709a9e9f45 | ASCII text |
Viber.tkape | afcd325090821cc8b0754957b65a7c42 | ASCII text |
VirtualBoxConfig.tkape | e90ae70ec3946e94440e8f5725c6fd05 | ASCII text |
VirtualBoxLogs.tkape | cc1584900211ec6061d36c1c63afd5f7 | ASCII text |
VirtualBoxMemory.tkape | 3b8c67f8105e7c891e5a1b32b52fd205 | ASCII text |
VisualStudioCode.tkape | b9079f2a6995346abe65e7ed52006734 | Unicode text, UTF-8 text |
WhatsApp.tkape | 612cfadb56285f3dfed4756b240cd654 | ASCII text |
WhatsApp_Media.tkape | 82eb8196fb12d25a5999a5929b17897f | ASCII text |
WinSCP.tkape | 16bc90df17dbb710edc0634eb7597b16 | ASCII text |
WindowsYourPhone.tkape | c1ca2caf373128dce7536526a835f7d5 | ASCII text |
XYplorer.tkape | cdf1013219b309b9df61621d44e8df54 | ASCII text |
Xeox.tkape | 1094ad045438cf57e11406b2876afa82 | ASCII text |
ZohoAssist.tkape | 4be9f80e753378bc45b04db4177b42eb | ASCII text |
Zoom.tkape | eb09607e775bcd437a3dda69b0118f35 | ASCII text |
iTunesBackup.tkape | 3ced4db297745fbc8a5421dd3e2b82ab | ASCII text |
mIRC.tkape | 4bd3dd5b34f5cdcddf47ef2d9a040978 | ASCII text |
mRemoteNG.tkape | 7930b69dff065f92940dc8be61641dc2 | ASCII text |
pCloudDatabase.tkape | 3e5232fb8b749e1b110843c2f648a32e | ASCII text |
BraveBrowser.tkape | 5ba41a9b763360f090ee9d29a909e0cc | ASCII text |
BrowserCache.tkape | ec42e50f00f2c4331d9f58f8384521c3 | ASCII text |
Chrome.tkape | 10e87f278fae949912bedfb04f3273aa | ASCII text |
ChromeExtensions.tkape | 9994f77a00d6b6de7b29ac7994591eb6 | ASCII text |
ChromeFileSystem.tkape | 4664669b1f0021f64b1c8a17c29bc458 | ASCII text |
Edge.tkape | 9aae688a205eb7199f999cbba46376da | ASCII text |
EdgeChromium.tkape | ce49e298d8c972e603d3bedf27eaec56 | ASCII text |
EdgeChromiumExtensions.tkape | 2fed1759c51d44908d5b4cd57f987213 | ASCII text |
EdgeFileSystem | 03b2f10e71d5843c3feaf526dd3170ff | ASCII text |
Firefox.tkape | 71e7276817c9b07bc8f8f34124656bb6 | ASCII text |
InternetExplorer.tkape | 82cee7fef8008e4e1bd6422f3319ed11 | ASCII text |
Opera.tkape | c9e21b4a7fe6a6f75bbe7ad2f18944b3 | ASCII text |
PuffinSecureBrowser.tkape | b2e9af2376f7ee94bc9f8a5a0267272a | ASCII text, with very long lines (341) |
Vivaldi.tkape | cb9f23c7f50d923df75dbea57df8a61a | Unicode text, UTF-8 text |
Yandex.tkape | 2e707379b8868bb5f6b0d0f48a89dfd3 | Unicode text, UTF-8 text |
!BasicCollection.tkape | 3a4b3f81b34cf8cb6b441ae7b79d12d5 | ASCII text |
!SANS_Triage.tkape | 69ae8157d48b9292516a872885d6ee32 | ASCII text |
Antivirus.tkape | 75f7660ecbc5e65fc61e9a2b8484d47d | ASCII text |
CloudStorage_All.tkape | dcb59f055d7d7121e6333308cd10fcfd | ASCII text |
CloudStorage_Metadata.tkape | 4de36d44a3e35e1e2853ff9d1f288582 | ASCII text |
CloudStorage_OneDriveExplorer.tkape | dd9db24862b333c3bd1b3a4b8cd5d108 | ASCII text |
CombinedLogs.tkape | 2774661d2a24d9378598d4a25c78507f | ASCII text, with CRLF line terminators |
EvidenceOfExecution.tkape | 3e17930e663196a995f756a5f82985ed | ASCII text |
Exchange.tkape | fa6515e0b27e6dc7e2b1603d2d1ee756 | ASCII text |
FTPClients.tkape | d3f81d68acf43e0f57d32fb280a21a73 | ASCII text |
FileExplorerReplacements.tkape | 324089fe9016efbabd8ffc10f6816ba9 | ASCII text |
FileSystem.tkape | b52edf7bb6fd240d9e9500aa5466d764 | ASCII text |
IRCClients.tkape | faf4df2b7fd310816843770e9a089d66 | ASCII text |
KapeTriage.tkape | 77c51a886441dda8eab704002da379eb | ASCII text, with very long lines (458) |
MessagingClients.tkape | 18b0f2e130c81046615a18d1f4bc85c4 | ASCII text |
MiniTimelineCollection.tkape | b0a5d414239c1bb41dad699f28ef3451 | ASCII text |
P2PClients.tkape | 4204a9b8a966ed09e5933e1b970f41b2 | ASCII text |
RecycleBin.tkape | b65cbfbf12897de286cb17c51392879c | ASCII text |
RegistryHives.tkape | be18356c23ea8a7a6f8e468f48d7a67d | ASCII text |
RemoteAdmin.tkape | d929eea75cb88aae29c943466103f486 | ASCII text |
SOFELK.tkape | 15e87d80613aad72f944d772bbff6ded | ASCII text |
SQLiteDatabases.tkape | 7014c81b1e03e0ece1695a2b98d4c578 | ASCII text |
ServerTriage.tkape | 99eff8fde90f52d36d88c7c82b8c1157 | ASCII text |
TorrentClients.tkape | 01e8d18b6110275846ecbf1b22571f9d | ASCII text |
USBDetective.tkape | 185b1e378c4401996b92909bd3903732 | ASCII text |
UsenetClients.tkape | 0ddcd7f16e6a85a3b358c112ba3e9106 | ASCII text |
VMware.tkape | b2c21ac6f97072ca2b7b6bcb4389f097 | ASCII text |
VirtualBox.tkape | 1fffc141879a44095dc729456cea0ff8 | ASCII text |
WSL.tkape | ee5618ab6604d461fb722c8975acf935 | ASCII text |
WebBrowsers.tkape | 82fa0e3475af903b684686f865ba4a7a | ASCII text |
WebServers.tkape | 34b3c1794063911ef7b86a2cc92c315c | ASCII text |
CompoundTargetGuide.guide | 237ba8131e12a07863f9b6c1d25a82da | ASCII text |
CompoundTargetTemplate.template | 166d8d54942c1578185383bf4ddef5e5 | ASCII text |
ApacheAccessLog.tkape | 5ece1037506bdcd2f9282f06dc222d93 | ASCII text |
IISLogFiles.tkape | 9bd0a9ed574a72c40d79cd9d1a327f4b | ASCII text |
MSSQLErrorLog.tkape | b376a3bfefeac6c56a7ade906e8bafcc | ASCII text |
ManageEngineLogs.tkape | a4bfe77f649acce8bd8e1365dace0af8 | ASCII text |
NGINXLogs.tkape | 2966fe72f8443515f23fd200c160ce22 | ASCII text |
PowerShellConsole.tkape | e8c9e50fa899a978f924c2adb4ea337b | ASCII text |
BitTorrent.tkape | a4ebf896bae73821e9d05f8e03b4b23a | ASCII text |
DC++.tkape | 0177863430ab2ffd7cf9d78151369fd4 | ASCII text |
Freenet.tkape | dcfc1828344471ca40498253faf6c885 | ASCII text |
FrostWire.tkape | cf136a582961efd81ac981010ba88059 | ASCII text |
Gigatribe.tkape | 8d129e6e981f7575b1d0309c75ec8d34 | Unicode text, UTF-8 text |
NZBGet.tkape | ec1d23dddbf97c05ca20bfeda1a8b2a5 | ASCII text |
NewsbinPro.tkape | c264afb644534e4477f9048bb69a1c43 | ASCII text |
Newsleecher.tkape | c8733daeb1eac8444ebeb43bae6f73db | ASCII text |
Nicotine++.tkape | e5a631d21845d7d4ed39b42878118222 | ASCII text |
SABnbzd.tkape | c664b3b87441ccf27e14a7d573eef031 | ASCII text |
Shareaza.tkape | 858c15c555f4e09054e62856add51dc6 | ASCII text |
Soulseek.tkape | 9988d970c7bf01208945cbcd82ded155 | ASCII text, with CRLF line terminators |
Torrents.tkape | d8f8d3d6c929700a08adbf3cc77d6fd1 | ASCII text |
Usenet.tkape | 5295cbd56161b1faba0df3bfd2d7ad53 | ASCII text |
qBittorrent.tkape | c737b46760aaca1df9caa11078f959ee | ASCII text |
uTorrent.tkape | 3d9ba59deefd9c6a0953441411e590c1 | ASCII text |
README.md | 7706e8be3b6b78e84fb4bf41ca71bc7f | ASCII text |
TargetGuide.guide | 2b905d468a55791872ad10c8352841e3 | ASCII text, with very long lines (490) |
TargetTemplate.template | 040b0ee858e96161991e5010b1dddc70 | ASCII text |
$Boot.tkape | 1b9c80db561dc4db91c39c82be992961 | ASCII text |
$J.tkape | 2c4cf317a1cb6e657e7ed2bad6a10a2b | ASCII text, with very long lines (304) |
$LogFile.tkape | 0df889d130d4fb8859a364d774574e5a | ASCII text |
$MFT.tkape | db883dd78b4049d46636a8210f2fca65 | ASCII text |
$MFTMirr.tkape | d91253358bb77ed11750146bb1ff60aa | ASCII text |
$SDS.tkape | 404ef6e23479bc6e19508b6cb197c193 | ASCII text, with very long lines (302) |
$T.tkape | 2b57db05da7b861daf9a558bfc225671 | ASCII text, with very long lines (302) |
ActiveDirectoryNTDS.tkape | 195f92114376db0253a11371b550c98d | ASCII text |
ActiveDirectorySysvol.tkape | 20b65bfcd85ce136eab16fc9f15f4397 | ASCII text |
Amcache.tkape | 12a4e03099c5c0ece3823b503969406c | ASCII text |
AppCompatPCA.tkape | c4c111071605ecaaf43eeb91ff15c5c2 | ASCII text |
AppXPackages.tkape | 4fd98f6db13d37dbc869784e5326030c | ASCII text |
ApplicationEvents.tkape | bf48455e34bef1ed734eccc08e638e09 | ASCII text |
BCD.tkape | 4f2993a10cf197663c36835bd70f3f04 | ASCII text |
BITS.tkape | ec464f3b6ed626434ff9a06c2ccef1d8 | ASCII text |
CertUtil.tkape | 05b7669f9b0e47a577835a9fe8d0607a | ASCII text |
Drivers.tkape | c80998c25a81d4b6f29a4d45f8af7b3f | ASCII text |
EncapsulationLogging.tkape | aed4e8cec8832919f14bf3d883d495bf | ASCII text |
EventLogs-RDP.tkape | 718af3892626c3703aed3c319232c8d7 | ASCII text |
EventLogs.tkape | e294b33fa3212b4911ebaa905a0afbec | ASCII text |
EventTraceLogs.tkape | 6c7c5efbbf9a55dde1558f9ad9f0c25a | ASCII text |
EventTranscriptDB.tkape | e19581d894b9dff4d7c90d1273c896bb | ASCII text |
ExchangeClientAccess.tkape | 9f417b72bd834c6f5c18050ba44fdd12 | ASCII text |
ExchangeCve-2021-26855.tkape | 4fcc7a939f0479f87ab9cff759ad7b82 | ASCII text, with CRLF line terminators |
ExchangeSetupLog.tkape | 61c8fc88cb058c334a2608174c9fc14e | ASCII text |
ExchangeTransport.tkape | 862a55e4ec7ca3f398d0833b6835be29 | ASCII text |
GroupPolicy.tkape | 22d286a6f7aa1c3159984bde9c653859 | ASCII text |
IISConfiguration.tkape | 178821413ede38da9b0622e63367cb1e | ASCII text |
IconCacheDB.tkape | 20da23589f479b3a17e781817939d75d | Unicode text, UTF-8 text |
LNKFilesAndJumpLists.tkape | 4bd997607702acd8c8f4ce2cf2fa868f | ASCII text |
LinuxOnWindowsProfileFiles.tkape | f6ff4a6e170e74bd8259eb799f734026 | ASCII text |
LogFiles.tkape | 6389af39e038d9dde7ddf6f9e94ccdd1 | ASCII text |
MOF.tkape | e86d6cf3655911bb4f5392602ba82df2 | ASCII text |
MemoryFiles.tkape | dd3f90629864c7bb17175e5799f928b6 | ASCII text |
MicrosoftOfficeBackstage.tkape | f4ad86fb29737df3920e968eb88fabc5 | ASCII text, with CRLF line terminators |
NETCLRUsageLogs.tkape | a183755a1ecaa7d85f1bf7ff712d554e | ASCII text |
Notepad.tkape | 13ca9056750f9100b1f9ce684bf87e5f | ASCII text |
OfficeAutosave.tkape | b028a823b3e9ae3f15ad566f9db03204 | ASCII text |
OfficeDiagnostics.tkape | 02c83284cee4031386e63789c820d0a7 | ASCII text |
OfficeDocumentCache.tkape | f2bc4f12b8fc365655de76cc722dcf11 | ASCII text |
PerfLogs.tkape | a4a1f97bcc46e0aba9f8aadf0e05b1f8 | ASCII text |
PowerShell7Config.tkape | 03905cf1d9a2708a2299f7b96146599e | ASCII text |
PowerShellTranscripts.tkape | 8a37055f5a5f8cf7708b3b88542b8288 | ASCII text |
Prefetch.tkape | 7d56aa1f1434e77bbd576b65191fd889 | ASCII text |
ProgramData.tkape | 86f41461a86452f3b90228796ec12817 | ASCII text |
PushNotification.tkape | dd83cc8320db02a95ada0037010f114c | ASCII text |
RDPCache.tkape | e36657b2da2b457e4df56e3dce9c1a1d | ASCII text |
RDPJumplist.tkape | a1a718baab93c04d2cc7c4c1b0297406 | ASCII text |
RDPLogs.tkape | 2198723b1dcfda52823531e43a8bcd64 | ASCII text |
RecentFileCache.tkape | b0bf1e6a70df0e321ebc0ca63f8bd87e | ASCII text |
RecycleBin_DataFiles.tkape | 73a65aecf61480a0130c243fee6fee42 | ASCII text |
RecycleBin_InfoFiles.tkape | 2ac6231e9800ed2029c0f35a9ad6697f | ASCII text |
RegistryHivesMSIXApps.tkape | 6cd2e8a84f358842d3c03fa8c4b06d64 | ASCII text |
RegistryHivesOther.tkape | 96d08bad518ef324a11a7342b82740e9 | ASCII text |
RegistryHivesSystem.tkape | fae9e6b55b2da2681feaeb7c6990a597 | ASCII text |
RegistryHivesUser.tkape | ec3484e31aac6b32cb718b9176076f62 | ASCII text |
RoamingProfile.tkape | b7876d359014e67ab22e39c24c8b6922 | ASCII text |
SCCMClientLogs.tkape | 5a1bee03da3a11283c66d498f09699c8 | ASCII text |
SDB.tkape | 688696c38b5503240c66aaef4a0d0982 | ASCII text |
SRUM.tkape | a1d89746cc8fdc9b82d761d770bbb09e | ASCII text |
SUM.tkape | 05df3fa8057ab98c8fc8f810b316415b | ASCII text |
ScheduledTasks.tkape | 6935beac0dffc925dda7c6a7f23bfff6 | ASCII text |
SignatureCatalog.tkape | 79a4a3eb9c405741b8e6d50e364404b8 | ASCII text |
SnipAndSketch.tkape | e32215c645dd982183477a75f90a9866 | ASCII text |
StartupFolders.tkape | b23d01078103f5bf65fbb73160900f7c | ASCII text |
StartupInfo.tkape | 5fe0388716a89cadab85ab5ff4f5c275 | ASCII text |
Syscache.tkape | fc60a198c2de5d8f6ae49884e32b3a84 | ASCII text |
ThumbCache.tkape | 894c0ea467e86de70507bc1269abd12c | ASCII text |
USBDevicesLogs.tkape | a7e2c092aeb0198db03a75977ac1fb32 | ASCII text |
UsersFolders.tkape | df73282db3559612b212362d55192957 | ASCII text |
VirtualDisks.tkape | 768d86d5f0d593dea231f4252673a785 | ASCII text |
WBEM.tkape | ecf39834de0a5e4e5e0f4d29e5ac8143 | ASCII text |
WER.tkape | 4000ec4e2f93f55a31947b098e654d16 | ASCII text |
WindowsSubsystemforAndroid.tkape | c9239684f5262cafa7a85f677db0f2d9 | ASCII text |
Debian.tkape | 6b3098cf289aae47461da26d95bf78fa | ASCII text |
Kali.tkape | d8b46b30022104caed3d2f234efd1977 | ASCII text |
SUSELinuxEnterpriseServer.tkape | 7fba03402d7658d8a16d2f74f07efd72 | ASCII text |
Ubuntu.tkape | 57f77383019411d79e902e4495475070 | ASCII text |
openSUSE.tkape | 4cf5f8dea0af044579e2f90d683d991f | ASCII text |
WindowsCopilotRecall.tkape | 37b7918279a638cdc24e160274b5d401 | ASCII text |
WindowsFirewall.tkape | f995d032a5474b539c6e3436b230280f | ASCII text |
WindowsHello.tkape | ccecba013695e0800da2952985176dc7 | ASCII text |
WindowsIndexSearch.tkape | b7252227e489f9b51ec66bdb610c4748 | ASCII text |
WindowsNetwork.tkape | 7dfd363e7e1e1b69236bd56eb9e49a4c | ASCII text |
WindowsNotificationsDB.tkape | c95b92419b15712a283a3e8b396a2d49 | ASCII text |
WindowsOSUpgradeArtifacts.tkape | ed32a4e1250e4e2b0649e1e8c6bdbf80 | ASCII text |
WindowsPowerDiagnostics.tkape | 42ae6a02e0214c01aa3ecb343fc134dd | ASCII text |
WindowsServerDNSAndDHCP.tkape | 1a0e200577129cb6344540c9194bf5b0 | ASCII text |
WindowsTelemetryDiagnosticsLegacy.tkape | 3976ac01ca600eefdf08a5483574d943 | ASCII text |
WindowsTimeline.tkape | c4e41817c508e345eb2729506526a9b2 | ASCII text |
WindowsUpdate.tkape | e96bd12776e59519b1bd1f070b4890d7 | ASCII text |
XPRestorePoints.tkape | 130d1bb47945d7ca31eff228427d7b33 | ASCII text |
kapeLogo.png | 404666be1ff287b7b4270dba18dce2ad | PNG image data, 600 x 394, 8-bit/color RGBA, non-interlaced |
training.md | a3923a9f6cb26bd3aa9131e192e5841d | ASCII text, with very long lines (563) |
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen |
JavaScript (0)
No JavaScripts
HTTP Transactions (11)
URL | IP | Response | Size |
---|