Report Overview
Visitedpublic
2024-07-23 01:52:10
Tags
Submit Tags
URL
github.com/EricZimmerman/KapeFiles/archive/master.zip
Finishing URL
about:privatebrowsing
IP / ASN
140.82.121.3
#36459 GITHUB
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Host Summary

HostRankRegisteredFirst SeenLast Seen
r10.o.lencr.org
unknown2020-06-292024-06-06 21:45:112024-07-22 18:12:14
github.com
14232007-10-092016-07-13 12:28:222024-07-22 19:13:57
codeload.github.com
623592007-10-092013-04-18 13:49:112024-07-18 10:34:01

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


File detected

URL
codeload.github.com/EricZimmerman/KapeFiles/zip/refs/heads/master
IP / ASN
140.82.121.9
#36459 GITHUB
File Overview
File TypeZip archive data, at least v1.0 to extract, compression method=store
Size561 kB (560876 bytes)
MD5e93ef92ce2273cafd2ccfeb40eb6bb97
SHA1ff64924a035380fc7729e1ce015113cfa5162a76
Archive (741)
FilenameMD5File type
bug_report.mdf0650658ace1992ba07060054b10dbc0ASCII text
feature_request.mdc3aa736613592fbf91405f43f313faceASCII text
PULL_REQUEST_TEMPLATE.md3c196b1dcb863fce10d6b15e0e4ec769ASCII text, with very long lines (538)
verify.yml524be62dfb8b1c1d627e7b8b18dc6f4eASCII text
.gitignore67dcb14edaad0b1203e1bf15c6350fd8ASCII text
.yamllintc8871e552d9f7b0765bd64225ff3b97dASCII text
CONTRIBUTING.md3a590225454b4b18d8cb50063f593ad4ASCII text
LICENSE8b6b996b89d3f1971fd6d7e67a1e10c7ASCII text
Plaso.mkapef7ce1c43fbcc21d8b3930e0008c60182ASCII text
Volatility_apihooks.mkapee59b9f8ad79a24b6697cfa603135dee2ASCII text
Volatility_dlldump.mkaped982f987f9f1b57278b7086a7b9d7296ASCII text
Volatility_dumpfiles.mkape066b4cb5ed6ffb9389438641137b8e9fASCII text
Volatility_filescan.mkape8209f22df62f66953590d01b18aaaa5bASCII text
Volatility_handles.mkapee544e0d3e468f1488cac0e8893efb379ASCII text, with very long lines (318)
Volatility_malfind_dump.mkapec598d1089bb76c7467e6a74b6364a97bASCII text
Volatility_memdump.mkape8f0f4f38608128f22b4ca0c7100a0452ASCII text
Volatility_mftparser.mkape28c4abc9364be84f54031953539f639aASCII text, with very long lines (318)
Volatility_moddump.mkape137105f9054c1475652ee26fc16b1fb5ASCII text
Volatility_procdump.mkape4f29f3992852f4ee65e9f0c17c36042bASCII text
Volatility_shellbags.mkapedfa13792fdefeec589cf77b326e74d4fASCII text, with very long lines (318)
Volatility_timeliner.mkapeb52650c4655a8197bcbe00f5fb4c5007ASCII text, with very long lines (318)
CrowdStrike_CrowdResponse.mkape5a8235712fe20493ccb56746b11a5ceeASCII text, with very long lines (385)
DensityScout.mkapee9604563e7d7d31d1ff4fb03930bca8eASCII text
DumpIt_Memory.mkapef16536207b2d324cbee0ce7e1030615cASCII text
DumpIt_Memory_ARM.mkapef726c467cc514c906d7c2d7d92085f8bASCII text
Everything_ParseEFU.mkapec33aeaec0b1a5609278cc424c0ab6ba3ASCII text
ExifTool.mkape2a1ec38873befeea40e2af461a66fbe3ASCII text
BMC-Tools_RDPBitmapCacheParser.mkape8038aa462f8d67690fa08bb23233e8d3ASCII text
BackstageParser.mkape2ab4e7dd4d03307ab94358e448fb8afeASCII text, with CRLF line terminators
BitsParser.mkapec4235190f21bef86b509bea7c0044acdASCII text, with CRLF line terminators
Bulk_extractor.mkape232637d29b50822fd2518224b2683ecaASCII text, with very long lines (467), with CRLF line terminators
CCMRUAFinder_RecentlyUsedApps.mkaped498b6eed04fc29983111ca3878d30e6ASCII text
Chainsaw.mkape5e7b887e2cf64f6bd248fc03a8307782ASCII text, with very long lines (305)
DHParser.mkape995e8e22801b6ce9d2ad92632f792c07ASCII text
DeepblueCLI.mkapef6d486cfb6758da2ed783c36d97205d6ASCII text
Ese2csv_SRUM.mkapeb2502041e71c8264707c4be0478cfedaASCII text, with CRLF line terminators
Events-Ripper_All.mkape252ad4b0ad2ef54e2e769d10a6b6a27eASCII text, with CRLF line terminators
Events-Ripper_eventFile.mkapeb7eae502c5533b7f02578db8bcdd6b61ASCII text, with CRLF line terminators
EvtxHussar.mkape48649a4a28bf47eb04a4cf97fba35c77ASCII text
HatTrickFreenetParser.mkape54eafa67e02b1c3403a7b8a78bb47056ASCII text
hayabusa_EventStatistics.mkape4da4d2429f9c2e0192ad9cc699954d37ASCII text
hayabusa_LiveResponse.mkapef89b70d1ac1ed867386158171c223270ASCII text
hayabusa_LogonSummary.mkape2cee695dd927b5a9447365ed2c351723ASCII text
hayabusa_OfflineEventLogs.mkape26d4d1a30e7daabc54e0a80e8aafdd8aASCII text
hayabusa_OfflineLogonSummary.mkape77efd63031186cfaa778fbe6f90c8921ASCII text
hayabusa_UpdateRules.mkape029d30af45acbedfc2f0f5c1aa40861dASCII text
INDXRipper.mkape2ba99b3aa95927acb601747309e9220fASCII text
KernelDump.mkape20b9c5a081810f315ddf14f70e597dd9ASCII text
LevelDBDumper.mkape092e81f04bcb6fe414eabf4995e1753dASCII text
Loki_LiveResponse.mkape5b91621403c5581ed54e629120961bb8ASCII text
Loki_Scan.mkapeb5d52a54d7f1835c03a6e7f85df354dfASCII text
LolDriverScan.mkape29c4a75b8fe1f56143b37820c0d1dd96ASCII text, with very long lines (304)
MMDBCmd.mkape000c98fa9fb7c99d7113d1cca42c0cc9ASCII text
Mplog-Parser.mkapeee57e59fd6a9849374e6aa533ef6e0b6ASCII text, with CRLF line terminators
ObsidianForensics_Hindsight.mkaped67d717a925dbe9809566fc6de09fe03ASCII text, with CRLF line terminators
OneDriveExplorer.mkape9acd79d3bf877bd6379b1e9d7537de26ASCII text, with CRLF line terminators
PowerShell_AD_Timeline.mkapeabfdd1fc51c65be1746ce3abc2251d8aASCII text, with very long lines (335)
PowerShell_ConvertPSHistoryTo-CSV.mkapea77cf57421ff5e42cc70c1ef2fe5b672ASCII text, with CRLF line terminators
PowerShell_ConvertUsageLogsTo-CSV.mkape95da04a6c8b65050f1c23a84b4616d4bASCII text, with CRLF line terminators
PowerShell_ConvertWindowsDefenderMPLogTo-CSV.mkapefc284baff222fe089fc44d7764c41c7eASCII text, with CRLF line terminators
PowerShell_Execute-BmcTools.mkape0dec61f93d151a09a9ba44b7da7fa78cASCII text, with CRLF line terminators
PowerShell_Execute-ThumbcacheViewer.mkape1b6a3577af0233e44778c224eff704b0ASCII text, with CRLF line terminators
PowerShell_Execute-Winlogbeat.mkapec37f9f22d6ac6cc3c64eb6c0e47c2601ASCII text, with CRLF line terminators
PowerShell_Get-ChainsawSigmaRules.mkape04c02565b4c3e258dc7e9628c15a78a7ASCII text
PowerShell_Get-DoSvc4n6.mkape11fc5b90ad611f792019f6e0a9d50ee5ASCII text
PowerShell_Get-InjectedThread.mkape0401e660bd54056c25f7fa738db96e50ASCII text
PowerShell_Get-NetworkConnection.mkapebb040f45a7826c51d3db386aa5889236ASCII text
PowerShell_MFTECmd_J-MFTParsing.mkape3efb9f5512e5c7d5b3d552db5fcf8788ASCII text
PowerShell_Move-KAPEConsoleHost_history.mkape2e9d7a5b32636e29f88acdd32f1f5998ASCII text
PowerShell_Netscan.mkaped18408e15f1030bd1759697210b7be8fASCII text
PowerShell_PCAParser.mkapedf683c799ea7d1a28fcef962a94cfc0fASCII text
PowerShell_Parse-MatterMostDownloadsJson.mkape328ead48f81c80455a36befe80df58c0ASCII text
PowerShell_Signed.mkapea5500ea4c09449b9049456d15eb814a5ASCII text
PowerShell_SrumECmd_SRUM-RepairAndParse.mkapeac92336ee3c7f5d8f21fef055f3fc8f2ASCII text
PowerShell_SumECmd_SUM-RepairAndParse.mkape5a4f03e8cbffb5671a8bcef70a7cfc46ASCII text
PrefetchDecompressionEnMasse.mkape3ff855797dce97739d635f6d754b4be1ASCII text
README.mdf47410ec0c83b2df544f88f88c96cfe3ASCII text
RegRipper_NTUser-Variable.mkapeed2102ffb88c3f82413547103ce55336ASCII text
RegRipper_NTUser.mkaped94e453fc25b03777eccd5a5e0ff96d1ASCII text
RegRipper_SAM.mkape3f5d0c454b01482d813111e68bcfb717ASCII text
RegRipper_SECURITY-Variable.mkapedf87be5af9b913011d54840d651e04b5ASCII text
RegRipper_SECURITY.mkape7c4372c2a3c38bb05a1c330eb64c47abASCII text
RegRipper_SOFTWARE-Variable.mkape36307930d66be7716a2da6f387ed69ffASCII text
RegRipper_SOFTWARE.mkapec9c89b52a6b9c418a921f406a1635393ASCII text
RegRipper_SYSTEM-Variable.mkape7d3ba89a2dab7795fab21e1859bbe478ASCII text
RegRipper_SYSTEM.mkape793d8635d4d910aac3f82ce9d57ed353ASCII text
RegRipper_UsrClass-Variable.mkapebeba191936fa1f6799ec6478c9cd7e49ASCII text
RegRipper_UsrClass.mkapea82be07ad324ce5b44647586d9f2dfabASCII text
SEPparser.mkape29d102d7194e4b6e710ab6013007f265ASCII text
SIDR_WindowsIndexSearchParser.mkape0db99a811f22bf288b627a043969cf8cASCII text
SRUMDump.mkape4cda4fccdb8eeb5620f3e10c533af2a8ASCII text
TeamsParser.mkape6e9e6faee3874a89e3554941c6eecf05ASCII text, with CRLF line terminators
ThumbCacheViewer.mkape2956f3828c21612a011d571d946ab7bbASCII text
VLSeeRecent_VLCRecentFiles.mkape7a8112bd609ad7cb793d1d9830be80dcASCII text
Velocidex_WinPmem.mkape2633c50d0e7697d73043e1d27ae0af5bASCII text
Velociraptor_KapeTargetsCollectionRestoreTimestamps.mkape02f0d4a96ced046413a44d1cb12c0593ASCII text, with CRLF line terminators
Volatility_amcache.mkapec31f905897ada9ab966a302519813312ASCII text, with very long lines (318)
Volatility_clipboard.mkapea2334df7c16d327e17552092978a61a3ASCII text, with very long lines (318)
Volatility_cmdline.mkape36c4a2f3d6847ad527cf32608f71bae7ASCII text, with very long lines (318)
Volatility_cmdscan.mkape7a80792d5057cd2dc53ebe37fd38f1bbASCII text, with very long lines (318)
Volatility_connections.mkape5bd82ee12d2d4bb0aa6673d454f2b7f0ASCII text, with very long lines (318)
Volatility_connscan.mkape0d6db6d2b358b1e723de99470f8f2367ASCII text, with very long lines (318)
Volatility_consoles.mkapef17ca1f869e2aa87969d3a565eb6ee62ASCII text, with very long lines (318)
Volatility_dlllist.mkape4923d463cf5d0ac314023df22c176e26ASCII text, with very long lines (318)
Volatility_driverirp.mkape5f9319b442ba903443ab96e7377262ebASCII text, with very long lines (318)
Volatility_hollowfind.mkape627d6c3c79689a5864471cb77fb7f792ASCII text, with very long lines (318)
Volatility_idt.mkape5fdb8eaef171680e4418ad5de1305c53ASCII text, with very long lines (318)
Volatility_malfind.mkape229d03ae0b954fd047d5565aed4b5899ASCII text, with very long lines (318)
Volatility_modscan.mkaped142ecef765e670e1c6cc6a8af9926daASCII text, with very long lines (318)
Volatility_modules.mkapedca5b030e44e039c2fc6f13af6d50bb2ASCII text, with very long lines (318)
Volatility_netscan.mkape93430c0622c4ddc9170172d216e6f2ffASCII text, with very long lines (318)
Volatility_notepad.mkape4df38ba7469b837e5e5926c5221c7530ASCII text, with very long lines (318)
Volatility_pslist.mkape1b49b7c76e50b7238ab0e8d99fd29cbbASCII text, with very long lines (318)
Volatility_psscan.mkape6ece4705f00e2c9c91c06c7162084cbfASCII text, with very long lines (318)
Volatility_pstree.mkape0f8acfa43e573020d7f2d6cc0e4431f9ASCII text, with very long lines (318)
Volatility_psxview.mkapedcb905062b52dd1fa1228dd23daea5a2ASCII text, with very long lines (318)
Volatility_shimcache.mkape5516ba685ab5167f18bc96d27ca14fecASCII text, with very long lines (318)
Volatility_sockets.mkapef8b5012121e40ba1e63402261cee0cafASCII text, with very long lines (318)
Volatility_sockscan.mkapeaa292d41eca23fa16806a657232ae9d3ASCII text, with very long lines (318)
Volatility_ssdt.mkape644cc2a11ddc60a1d086444407d3e23fASCII text, with very long lines (318)
Volatility_userassist.mkapeb549832d225120babbf7b024ca80e8a8ASCII text, with very long lines (318)
Volatility_userhandles.mkape023e907ccc8c9a68e0e2ee5d742a8418ASCII text, with very long lines (318)
WIFIPassView.mkape8116fc7a067a45ff02becbdb2d7c7bbcASCII text, with CRLF line terminators
WMI-Parser.mkapef9f1655e7a470f2cf84e89a1af8d0e0aASCII text
Windows_Hello2Hashcat.mkape58b963e2d49081cde03bcbc66b5423aeASCII text
Zircolite_Scan.mkapef70079b325238850c342cb02b01c7035ASCII text, with very long lines (455)
Zircolite_Update.mkape004b94d8a0356408f9726c2e4c5047abASCII text
hasherezade_HollowsHunter.mkapea4d16793d702cd4d064efcb2808fb4c2ASCII text
iTunesBackupReader.mkape92b227bb8d2e02aad02d7991821f621cASCII text
log4j-scanner.mkape7c7f23d2d7f2a40aa6fc3dadbb5feec2ASCII text
mimikatz_NTLMHashes.mkape77da26569475c189d2ca82128b085cb5ASCII text
reg_hunter_binary.mkapec45c2682d886a668e48484d5998aef83ASCII text
reg_hunter_email.mkape42bea15984e4f1a4d41bd69eae3cf06dASCII text
reg_hunter_encoding.mkapead2b0dcd1e6edd146145897dd3ab8729ASCII text
reg_hunter_ip.mkapec4f1324736e5cfb735e3d94f9940bcb0ASCII text
reg_hunter_link.mkape74b3d07de51c1106d246f0c51c19799fASCII text
reg_hunter_obfuscation.mkape2f49fb915454081e9e87575bc92c4328ASCII text
reg_hunter_script.mkape0562056879b28e5877d79ee8469970d8ASCII text
reg_hunter_shell.mkape689fd07c023650c3fae2e38253773158ASCII text
reg_hunter_shellcode.mkape386fa0f1a60618e95636764be8996defASCII text
reg_hunter_suspicious.mkape0f228fb4140f9a0add95bacfe4fa7bedASCII text
reg_hunter_unc.mkape26289ccbafe731aee866ce436ab9d2ecASCII text
reg_hunter_url.mkape404fe03bdda2a385b150e108cb002f45ASCII text
KAPE_Automation.mkapec36259941ec36758c97869087cb44035Unicode text, UTF-8 text
Kaspersky_TDSSKiller.mkapef1f744cbf20dbe447fc0df9339e71310ASCII text
LogParser_ApacheAccessLogs.mkaped845045fd6f070fd089975df775ecf3eASCII text
LogParser_DetailedNetworkShareAccess.mkape59c6484239fe11c72c37222452cf1198Unicode text, UTF-8 text, with very long lines (1475)
LogParser_LogonLogoffEvents.mkapeab161a551309f9f5178d4a0571bc2227ASCII text, with very long lines (8276)
LogParser_RDPUsageEvents.mkape15e933163650bc60aefa3ddbe355659cASCII text, with very long lines (3469)
LogParser_SMBServerAnonymousLogons.mkape6f18d406caa8126403b72dbfaf607b25ASCII text, with very long lines (371)
MagnetForensics_EDD.mkape1d90191f57c6c1dcf9ee4f5dd708e3e0ASCII text
MagnetForensics_RAMCapture.mkape9461994bb89bdb64962bc0380936fca4ASCII text
McAfeeStinger.mkape13b89d4f86f9cb585092968f17145457ASCII text, with CRLF line terminators
NTFSLogTracker_$J.mkape7218d98589df902a408448b6159651bbASCII text
NTFSLogTracker_$LogFile.mkapebea14a517296d78d2e9ec64edeb06b9cASCII text
NirSoft_BrowsingHistoryView.mkape8fc5d7531c198042b129f7f5f143fb56ASCII text, with CRLF line terminators
NirSoft_FullEventLogView_AllEventLogs.mkape30bf172f700c1af945393c68d2c989ccASCII text
NirSoft_FullEventLogView_Application.mkape4effec5c8bbc1a9bfd18c918458a4675ASCII text
NirSoft_FullEventLogView_PowerShell-Operational.mkape347ec532247a64055f723c7492892b58ASCII text
NirSoft_FullEventLogView_PrintService-Operational.mkape97a603d7d7e543a74a111ed1a0308c39ASCII text
NirSoft_FullEventLogView_ScheduledTasks.mkape020297c3bf1a87527f564050fedf0592ASCII text
NirSoft_FullEventLogView_Security.mkape9ce0b8e3b8164328f19fda6f19f43f8cASCII text
NirSoft_FullEventLogView_System.mkape0ab5e96e56666c2ac6d92547f26846a6ASCII text
NirSoft_TurnedOnTimesView.mkapebad2430b79c2327a34cfb9de62cce350ASCII text
NirSoft_USBDeview.mkape672e82cf6c3f5e6ee770f024ed108af4ASCII text, with CRLF line terminators
NirSoft_VideoCacheView.mkaped9d7a7f60d1d0f2b91806ad8110d1661ASCII text, with CRLF line terminators
NirSoft_WebBrowserDownloads.mkape359433d1a85b7a31fa45345650934e9cASCII text, with CRLF line terminators
NirSoft_WebBrowserPassView.mkape02ad756307e3da428198711c3fcfc339ASCII text, with very long lines (422), with CRLF line terminators
Nirsoft_AllThreadsView.mkaped3a4ecf2080140175c89b882d7b63ff0ASCII text, with very long lines (414), with CRLF line terminators
Nirsoft_AlternateStreamView.mkapec0bea86e7953614482242525cb99d72fASCII text, with CRLF line terminators
Nirsoft_AppResourcesUsageView.mkapec4afb19a43c025f088518e897b1ce6f1ASCII text, with very long lines (360), with CRLF line terminators
Nirsoft_BluetoothView.mkape478ea70b3e8b77e552719c769c75b262ASCII text, with very long lines (319), with CRLF line terminators
Nirsoft_DNSDataView.mkape023f6a71cb03b8dfc7efdbd5d9f64f49ASCII text, with very long lines (374)
Nirsoft_FileActivityWatch.mkape693d75021703d780b480e68a21422c45ASCII text, with very long lines (369), with CRLF line terminators
Nirsoft_LastActivityView.mkape8c80acfde0ab81aff6526ddf811e7fb9ASCII text, with very long lines (482), with CRLF line terminators
Nirsoft_OpenedFilesView.mkape7502cb7ce1e9c25ddb9871519f50e564ASCII text, with CRLF line terminators
Nirsoft_OutlookStatview.mkapecc39295cd9cff7e7e37e6c9065bf9435ASCII text, with very long lines (487)
Nirsoft_ShadowCopyView.mkape42ef52043da4fcfffb693605a027abb2ASCII text, with very long lines (393), with CRLF line terminators
Nirsoft_WhatInStartup.mkapea625b90cef83bf7929d959d0251832deASCII text, with very long lines (322), with CRLF line terminators
Nirsoft_WifiHistoryView.mkape833d5144938eff7110e9b96d2916e174ASCII text, with CRLF line terminators
Nirsoft_WinDefThreatsView.mkape00779a95c931635693177b77aed127aaASCII text, with CRLF line terminators
Nirsoft_WinLogonView.mkape28b535987c5297faafb76eb6f1c63875ASCII text, with very long lines (383), with CRLF line terminators
Nirsoft_WirelessKeyView.mkapef6d0e2b85927c35d5406c5935fb376a7ASCII text, with very long lines (473), with CRLF line terminators
PowerShell_5SecondPause.mkapedb3a6687b3582235c88fef59bf9c4bf0ASCII text
PowerShell_log4j.mkape3a4d05aa9332e160c4b327a2031d2561ASCII text
README.mdbc0dfd54d7af82a9462e23663e604c4dASCII text
SOFELK_Parser_EvtxECmd.mkape9623f6dffbb130addf24457c81ce2eb6ASCII text
SOFELK_Parser_LEcmd.mkapec15dc063e87796a60b5b7f20b0fe58e6ASCII text
SOFELK_Parser_MFTECmd_J.mkapebf21b94dacaff2ef0057a27558208e88ASCII text
SOFELK_Parser_MFTECmd_MFT.mkape647598f1cbf32fb42ac88650d120d55aASCII text
SOFELK_Parser_PECmd.mkape1fbe0851da4ddecfb8a72e476965780cASCII text
SQLite3_TeraCopy_History.mkape863c3179b4f66b3665e6cc0cce3572c9ASCII text, with very long lines (621)
SQLite3_TeraCopy_Main.mkape3ac31c8638e9b2f25853c345b3da9404ASCII text, with very long lines (403)
Snap2HTML.mkapea8d5e9c230a2cfcd9d6fd5bfedaf0de6ASCII text
SysInternals_Autoruns.mkapeaba20fc9557a148135bfae354f3cbddaASCII text
SysInternals_Handle.mkapea1873bbbc583272354ffda6572e80db2ASCII text
SysInternals_PsFile.mkape796453107158119f3ed4550605e563f5ASCII text
SysInternals_PsInfo.mkapeae0501b38dbfba8419cb794e740481cbASCII text, with very long lines (351)
SysInternals_PsList.mkapefccad7a95d269f44f9a29bf340c4f3f5ASCII text
SysInternals_PsLoggedOn.mkapedb00c31612ebd66511553d0785a336c6ASCII text
SysInternals_PsService.mkape4f8e7183ea56076cc494b45afa20100fASCII text
SysInternals_PsTree.mkapee99a2b2ff5540392b73df1e2fbfe31ccASCII text
SysInternals_SigCheck.mkape177a0aa17dcf989ed75bc9f6bed88436ASCII text
SysInternals_Tcpvcon.mkape1d6ecd048c844bb061c7af0312811569ASCII text
TZWorks_CAFAE_Registry_System.mkapebe06f72bb63634079b280bbf1e015608ASCII text
TZWorks_cafae64_Amcache.mkape9b754afa7bfcd6ce30e438de923a756eASCII text, with CRLF line terminators
TZWorks_cafae64_Background_Activity_Moderator.mkape4478cf8a47da5711e94bc81c882d6c69ASCII text, with CRLF line terminators
TZWorks_cafae64_CODECS.mkapef603c67cb5102f7236e26174ddaedaadASCII text, with CRLF line terminators
TZWorks_cafae64_CSLIDs.mkape392455a72cd6d5ad5a7765116dc58f1bASCII text, with CRLF line terminators
TZWorks_cafae64_Computer_Config.mkape8b53fca01f140f6f1cc069879d2e4fd6ASCII text, with CRLF line terminators
TZWorks_cafae64_Devices.mkape14515d287440117e386f44b419d2ccf2ASCII text, with CRLF line terminators
TZWorks_cafae64_Explorer.mkape87e324c42f00c0bccb85b0b59b3bef02ASCII text, with CRLF line terminators
TZWorks_cafae64_InProcServer32.mkape86735f8aa4234034a6bcc018ddd57d58ASCII text, with CRLF line terminators
TZWorks_cafae64_Installed_SW.mkape5adf0c4ad604a5cbfe7f0e8899175a34ASCII text, with CRLF line terminators
TZWorks_cafae64_MUIcache.mkape4681ac16d5f9db9c7f818ecd6fefce4dASCII text, with CRLF line terminators
TZWorks_cafae64_NW_Artifacts.mkape8cb7c77cda0f0a9134bee969b9bfbaf7ASCII text, with CRLF line terminators
TZWorks_cafae64_OfficeDocs.mkapeed128db1ffc04bf2235a5989e5082cf1ASCII text, with CRLF line terminators
TZWorks_cafae64_OpenWith.mkape1dacdbbb4371ad41b6256fc6f60591f4ASCII text, with CRLF line terminators
TZWorks_cafae64_Openrun_MRU.mkape4dbde467d460a2a37b119f20d9fde125ASCII text, with CRLF line terminators
TZWorks_cafae64_OpensaveMRU.mkape1bc2615ca1c150ca9e8b9eca0ed51d4aASCII text, with CRLF line terminators
TZWorks_cafae64_OtherAppsRun.mkapec67e2938d148283cd3e2b7fb834a7173ASCII text, with CRLF line terminators
TZWorks_cafae64_Persistence.mkapecd2e12d652eb2cbc9efbab60f3b84e83ASCII text
TZWorks_cafae64_Recent_Docs.mkape06fc7449f76d4c19a846408011b3e81eASCII text, with CRLF line terminators
TZWorks_cafae64_Runkeys.mkape7f84b03014c42bf1bae8fb102d65a383ASCII text, with CRLF line terminators
TZWorks_cafae64_SAM_Registry.mkape197b1db7f24fd84dcac41066253a1feeASCII text, with CRLF line terminators
TZWorks_cafae64_SOFTWARE_Registry.mkape949c6fa3737c2611e34d8d3e9c4163c8ASCII text, with CRLF line terminators
TZWorks_cafae64_SYSTEM_Registry.mkapeba0e3c4f349b9e4794026a0822a73e8eASCII text, with CRLF line terminators
TZWorks_cafae64_Services.mkapeb7e5de6729dd4e6b47107ab7d09c7474ASCII text, with CRLF line terminators
TZWorks_cafae64_Shimcache.mkape3cae5f4c53191759cd9406ede71d5faeASCII text, with CRLF line terminators
TZWorks_cafae64_System_Restore.mkape39044eea9e1c094c0aae4fbfc893b70fASCII text, with CRLF line terminators
TZWorks_cafae64_System_Timezone.mkapecb0265eb1e89bc60d597f493d432a357ASCII text, with CRLF line terminators
TZWorks_cafae64_USER_Registry.mkapec9d225a34ff11d5370630312bee24301ASCII text, with CRLF line terminators
TZWorks_cafae64_Userassist.mkape6fa07512cc8814e31ea465ff60fc96e4ASCII text, with CRLF line terminators
TZWorks_cafae64_Volume_Info.mkape1e856566aaa06630a2195b7fc7a8f72eASCII text, with CRLF line terminators
TZWorks_cafae64_Web_Info.mkaped76ca6c5d2bcd8575aa49e761548e75fASCII text, with CRLF line terminators
TZWorks_csp64_Chromium_Browsers.mkape6b7bb816f4ddd16ce28dc398f4c20ca3ASCII text, with CRLF line terminators
TZWorks_evtwalk64_EventLogs.mkapeb65574c3ed9a7d17ead91b690be6e5bbASCII text, with CRLF line terminators
TZWorks_evtwalk64_EventLogs_ApplicationEvents.mkape700a9ff6c1fd30e49836de5705753dd9ASCII text
TZWorks_evtwalk64_EventLogs_Creds.mkape3526275d53c164a92465c11705047686ASCII text, with CRLF line terminators
TZWorks_evtwalk64_EventLogs_Logon.mkapec911d7a29410aef1585a4ae3f983e040ASCII text, with CRLF line terminators
TZWorks_evtwalk64_EventLogs_PWChange.mkape1fca1f0efaa937c176b93d4bec20707cASCII text, with CRLF line terminators
TZWorks_evtwalk64_EventLogs_ScheduledTasks.mkapebef03461a4cc0ddd6291adf97083784eASCII text
TZWorks_evtwalk64_EventLogs_Startstop.mkape766e05a620bbed49a4d88ade80ee86f2ASCII text, with CRLF line terminators
TZWorks_evtwalk64_EventLogs_TimeUpdate.mkape5d25d5747120b7148ca907021dd31531ASCII text, with CRLF line terminators
TZWorks_evtwalk64_EventLogs_USB.mkapee604e9249c5049856320138227291097ASCII text, with CRLF line terminators
TZWorks_jmp64_Jumplists.mkape87865120b9161b5b86d64bc621493158ASCII text, with CRLF line terminators
TZWorks_jp64_USNJrnl.mkape38e4046c46c5d7f13b0c27b85a9710baASCII text, with CRLF line terminators
TZWorks_lp64_Shortcuts.mkaped422e8f19735e625f12d1558da27ba90ASCII text, with very long lines (350), with CRLF line terminators
TZWorks_mala64_Logfile.mkape0c32cffc74e4822ef8bdc8ffaf4d664fASCII text, with CRLF line terminators
TZWorks_ntfswalk64_MFT.mkape7b27873019944e28ed21ad68851ea8ceASCII text, with CRLF line terminators
TZWorks_pf64_Prefetch.mkaped100c7c8e303f15bb9f012a1800b9331ASCII text, with very long lines (329), with CRLF line terminators
TZWorks_sbag64_Shellbags.mkape2666cd3f6a467c571ea61729821ff822ASCII text, with very long lines (363), with CRLF line terminators
TZWorks_tac64_ActivitiesCache.mkapecbd49a7ff9c163922d586f31f6029fc4ASCII text, with very long lines (328), with CRLF line terminators
TZWorks_usp64_USBArtifacts.mkapef8a0eec85225b4b51682ac6a1fcd2adfASCII text, with very long lines (342), with CRLF line terminators
TZWorks_wacu64_AppCompatibility_Cache.mkape812584a9ca99650aa7c9bae8cfcf03d4ASCII text, with very long lines (330), with CRLF line terminators
Thor-Lite_LiveResponse.mkape86bb5dec00fb5078a9819eaeb62b5840ASCII text
Thor-Lite_LiveResponse_Lookback30days.mkape25cb4210399965b33b25562d5c9d6b0dASCII text
Thor-Lite_Scan.mkape24bd26fef03e96bef4aed23c9f8e8775ASCII text
Thor-Lite_Upgrade.mkapef763891a4bec73d75848cb78cb6bfd1aASCII text
Thor_Scan.mkape35951f9da2b6a7bf98a7a6d83dd179feASCII text
Thor_Upgrade.mkape01b9674a17ba8a6f01ca35eea56ccc29ASCII text
Winlogbeat_ALL.mkapefeefe20c83c390b381c7aea4c10ff698ASCII text
!!ToolSync.mkapee5bd30f72bfb382efee50c68e7c51220ASCII text
!EZParser.mkape56c5b85413b11eca1721bc376899c042ASCII text
Events-Ripper.mkape0eb488afce2131e7f10142d83240a4c1ASCII text, with CRLF line terminators
Hayabusa.mkape4681de11a114f768d1106a79b89df477ASCII text
KapeResearch_Registry_JSON.mkapefa9d6116b9eeb3b41058fc4afcffaf1dASCII text
LiveResponse_NetSystemInfo.mkapea6e6df4e1ab825a1a865e33aa54a651dASCII text
LiveResponse_NetworkDetails.mkape8b1dad264fe27f60512a66b7fa771e83ASCII text
LiveResponse_ProcessDetails.mkaped3a5f84fd279660595887ac198193c9cASCII text
LogParser.mkape924101236e8d9060e4cfbc6425db7dd7ASCII text
MFTECmd.mkapec775b4d3f95d1ef2c19646da80cdf753ASCII text
NTFSLogTracker.mkape8e9c4944ed8f200e9346673c1afb8158ASCII text
PowerShell_LiveResponse_SystemInfo.mkape0c43536d2b5626be6107b4328d4ae702ASCII text
RECmd_AllBatchFiles.mkapef657e901f3dc89c98061c6caa803d207ASCII text
RegRipper.mkape1a2cd9402610b960976487ce574f1ff8ASCII text
Reghunter.mkape549c449dbc213186f35ed1f448982f27ASCII text
SOFELK_Parser.mkape4010170424fea483665fe379f5932255ASCII text
Volatility_Disabled.mkaped599caaf5ae81fb3d61f4592f97af7b5ASCII text, with very long lines (318)
bstrings.mkape615912c68dbd9d41c74554c1eefa66f4ASCII text
bstrings_CryptoWallets.mkape7e50275c1dd963cb62bb0079bb7b203eASCII text
CompoundModuleGuide.guideb35821db56c7331519cc55e0408b0392ASCII text
CompoundModuleTemplate.templated16df3ed126416e5651cb0ab48fc1c6fASCII text
AmcacheParser.mkapece453ce59a32e1308e44001844d88607ASCII text
AppCompatCacheParser.mkape4a634f0878c90f0bbb3f3e90da1eb1eeASCII text
EvtxECmd.mkape94a780432ecebf768b230ff2d9f5291bASCII text
EvtxECmd_RDP.mkape290277cbba3ba49dc36fe632d3d988ddASCII text, with very long lines (494)
JLECmd.mkape4e0a49d3ad82bbb2268fa30304b50e8eASCII text
LECmd.mkapeb0f3ccf0d6a763240f64f175bbb68af3ASCII text
MFTECmd_$Boot.mkape44c440f5f222a1ef82fabb11f4b7e9d5ASCII text
MFTECmd_$I30.mkapebc7043634f72c956361157a25eca4c5eASCII text
MFTECmd_$J.mkape880093dfb0cb6a964c2cd0a01e3eea2dASCII text
MFTECmd_$MFT.mkape70114f8b76c1b07c1403d9b1b7694587ASCII text
MFTECmd_$MFT_DumpResidentFiles.mkape06eba1c5547b6d8873928f82feeb11ccASCII text
MFTECmd_$MFT_FileListing.mkape0fc996ce958c990685d54c6e48732533ASCII text
MFTECmd_$MFT_ProcessMFTSlack.mkaped127f1b82a335bd1c4ce03afc277d45aASCII text
MFTECmd_$SDS.mkaped7d03376f1fa16e7dde8aaf744f9a2deASCII text
MFTECmd_BulkExtractorCarvedMFTRecords.mkape3568486a935a22afc91174cd2d9dda5eASCII text
PECmd.mkapec92ad16f550fb1d9f7a3f6dc4aa2790bASCII text
RBCmd.mkape881fdbdfe0e36e41dcfacc6c29a1d858ASCII text
RECmd_AllRegExecutablesFoundOrRun.mkape9db651bc51c7f1656ad70be81a5639e5ASCII text
RECmd_BCDBootVolume.mkapeaf9b8acec40c793ce542103486310b7aASCII text
RECmd_BasicSystemInfo.mkapeaea7b0080f8a4f9e8a03e083aa2ba955ASCII text
RECmd_DFIRBatch.mkape0b53a5278fe0da011d5a12d06f626275ASCII text
RECmd_InstalledSoftware.mkape1d0f7c1070f7c944e2d4e3b62a700945ASCII text
RECmd_RECmd_Batch_MC.mkape8e79d2beb51f1a1e7d6c4e22eb417808ASCII text
RECmd_RegistryASEPs.mkape273a7653d97ecb4cd7950ab075dc2678ASCII text
RECmd_SoftwareASEPs.mkape509866cd0aa996af6aa3928405a4bfa4ASCII text
RECmd_SoftwareClassesASEPs.mkapebf4395ce3c92079157d72e4ce9dde09bASCII text
RECmd_SoftwareWoW6432ASEPs.mkape027b2b5965dc01950c8fee91634a40c9ASCII text
RECmd_SystemASEPs.mkapeafe96f8526052a7d276443cacd576edfASCII text
RECmd_UserActivity.mkape03b1ee177d61453fa0a0ed5ad23e7758ASCII text
RECmd_UserClassesASEPs.mkape621a39d81ecf4430c8896f8422809d50ASCII text
RecentFileCacheParser.mkapebf5c0acbd5f39a6b3ce5839024a9c82bASCII text
SBECmd.mkapec92a48221adbda2bcc57b42daed195b4ASCII text
SQLECmd.mkaped1935b9419a5623917511537cb4a44eeASCII text
SQLECmd_Hunt.mkape98f255001767537654084d678741764dASCII text
SrumECmd.mkapef117e395e6409b9ba3058de0d65df773ASCII text
SumECmd.mkape8c9ce40e6dbea0b9f0bb9c9580757a74ASCII text
WxTCmd.mkapeccfa21364698b050597226d2620fc51eASCII text
bstrings_AeonWallet.mkape9a85ad1e47a810a8eca240a758dfa0b1ASCII text
bstrings_BitCoinWallet.mkapeca09c714e1dcccb38767d6acd37f2922ASCII text
bstrings_Bitlocker.mkape9d9bd59b5430cd7815ce6a2b7b4fd467ASCII text
bstrings_ByteCoinWallet.mkapeeac9f20207758ab33cd14cc1017bd868ASCII text
bstrings_CreditCards.mkape97dd8740dfbf2f556cd07797741c244dASCII text
bstrings_DashCoinWallet.mkape0a92e636a2148c6d3a20285430b5f603ASCII text
bstrings_DashCoinWallet2.mkape3919073be3b3d5ae0be61e07dd55bbfdASCII text
bstrings_Email.mkapee2db752b42556bbfeca2cf5c052dbc93ASCII text
bstrings_FantomCoinWallet.mkape651ff992fd0f1d0717cf98c27895344aASCII text
bstrings_IPv4.mkapedfde4820d42587edbdcaebfd7d26ab4dASCII text, with very long lines (305)
bstrings_MACAddresses.mkapeff199efe3b5d0896dc9062ff6f905fe6ASCII text
bstrings_MoneroWallet.mkape66a2947ef94fcc39ee410b752207a0b3ASCII text
bstrings_SSN.mkapedd29df233b477f2cd6bee2e88b902227ASCII text
bstrings_SumoKoinWallet.mkape6bb962e3e63d71fab9700044083ad0c2ASCII text
bstrings_UNC.mkape04d02ba6353afd96f4ee3c0057436bdaASCII text
bstrings_URLs.mkapec670fe68aad7ce4636aa6fc0d1377f19ASCII text
bstrings_USPhone.mkapeded04016cedb3a8dfca89c6f3ff159baASCII text
bstrings_WinPath.mkapea470508006478dc4b1e7a00bb61a59fdASCII text
bstrings_ZipCodes.mkapebef160a5c80fca5807405ccf4abe9c20ASCII text
iisGeoLocate.mkapef21400bb4b3487251c577b45060e2b3eASCII text
KapeResearch_EventLogs_XML.mkape49899b633875d2002e362edcf34f91d3ASCII text
KapeResearch_Registry_Amcache_JSON.mkapec30644342180a5267cbfb7817a4fb88cASCII text
KapeResearch_Registry_BBI_JSON.mkapecf601ca57f289e0461d5c28ceecca12cASCII text
KapeResearch_Registry_BCD-Template_JSON.mkape4d9b28b771aa771762d6d43e254f7c70ASCII text
KapeResearch_Registry_COMPONENTS_JSON.mkape622348bfdd682ab24d39902fc0cb1824ASCII text
KapeResearch_Registry_DEFAULT_JSON.mkape3e4311f328edc38db5a4fa12588ac5dbASCII text
KapeResearch_Registry_DRIVERS_JSON.mkapef9def76ed4f92999c680b9ab506d3a95ASCII text
KapeResearch_Registry_ELAM_JSON.mkapedc8f1e8539757924be35925756f37cffASCII text
KapeResearch_Registry_NTUSER_JSON.mkape6b22dd266bb7e4551bdf7779f5feb94bASCII text
KapeResearch_Registry_SAM_JSON.mkapea60a45efda588407e6422f5af6b232daASCII text
KapeResearch_Registry_SECURITY_JSON.mkapedc47a188192718172bc648b49de0d5beASCII text
KapeResearch_Registry_SOFTWARE_JSON.mkape8135e8a2dfd3a86963a92749d63b1522ASCII text
KapeResearch_Registry_SYSTEM_JSON.mkape624fe79787c6e870837fe86147e1b19eASCII text
KapeResearch_Registry_SysCache_JSON.mkape1e049f947c74830a0a8f49493c7c72ddASCII text
KapeResearch_Registry_UsrClass_JSON.mkape4ddcb388c79cefde0f176948e28ce2dfASCII text
KapeResearch_Registry_VSMIDK_JSON.mkape793265185a4689c35cc87ccfbfd4d495ASCII text
KapeResearch_Registry_userdiff_JSON.mkape2d303d389de8bf3eed029599edd8f43aASCII text
Sync_EvtxECmd.mkapec3406a79836c7f3ebf8f3ba42532856bASCII text
Sync_KAPE.mkape494e164ecbad2dc81b304d59713260c5ASCII text
Sync_RECmd.mkape699fb0b085fe668c9e6734708874f41aASCII text
Sync_SQLECmd.mkape0f9129ea1c4f8f39b51438dfb679e9daASCII text
ModuleGuide.guide36c2308234210d516f29ca47953f50d5ASCII text, with very long lines (305)
ModuleTemplate.templatec2cd335326e8e48a416a9f2118451d66ASCII text
README.mde6861977b945439b5d6852e3251a389cASCII text
PowerShell_Arp_Cache_Extraction.mkape5587cac3c890a1cb7fa082679c64f0b3ASCII text, with CRLF line terminators
PowerShell_Bitlocker_Key_Extraction.mkape4fb9d2bf84095ac57a260b4f532804f3ASCII text, with CRLF line terminators
PowerShell_Bitlocker_Status.mkape0cc670e2015bba014144b9820f0956e8ASCII text, with CRLF line terminators
PowerShell_DLL_List.mkaped69600eeac825ea72929dff03c98b7e4ASCII text
PowerShell_Defender_Exclusions.mkapeb3d2bf8f4c6942a72e43b80c16b3e91cASCII text
PowerShell_Dns_Cache.mkape8c036df52ef4da0e51cd757180539d92ASCII text, with CRLF line terminators
PowerShell_LocalAdmin.mkapec5266493e91a5e2d4efed152744edf37ASCII text, with CRLF line terminators
PowerShell_Local_Group_List.mkapeb0f3f384ddd3fe01a7ff860f54af2e50ASCII text, with CRLF line terminators
PowerShell_NamedPipes.mkape4e4058beb8240a49fb6d95e9cbbe8c5cASCII text
PowerShell_NetUserAdministrators.mkape4f7261f277a6dcae8dca1b75ba758612ASCII text
PowerShell_Network_Configuration.mkaped787b9f4d0fbf8180ab09f028c1f037eASCII text, with very long lines (442), with CRLF line terminators
PowerShell_Network_Connections_Status.mkape4139a55b8f4edaffd6ea31e3c3aed5e5ASCII text, with very long lines (304), with CRLF line terminators
PowerShell_Network_Share.mkaped35456e2a0bb9589abf38b63b3bd5f7bASCII text, with CRLF line terminators
PowerShell_ParseScheduledTasks.mkapea7965e658235dd792ea23e5b27029b7aASCII text, with very long lines (1424), with CRLF line terminators
PowerShell_ProcessList_CimInstance.mkape762523005388937ff06b3a2b8b94eb77ASCII text, with very long lines (357)
PowerShell_ProcessList_WMI.mkape1b199403e4be769d89642acbdc5ae985ASCII text, with very long lines (1287)
PowerShell_Process_Cmdline.mkape981cf9e355d5bb6e977014bcf8d74752ASCII text
PowerShell_SMBMapping.mkape6169110c00ea471db0fd67f357a1380eASCII text, with CRLF line terminators
PowerShell_SMBOpenFile.mkape6e0f8b0dda4d0f7a4783cdb5480ad712ASCII text, with CRLF line terminators
PowerShell_SMBSession.mkaped978aba521ce7ef6f7c7b4eebc7fd8adASCII text, with CRLF line terminators
PowerShell_Services_List.mkapec024a1b48db9b13396ee22c3d5012d75ASCII text, with CRLF line terminators
PowerShell_Startup_Commands.mkape79730ba91439d2cb46e7d3fb46da1894ASCII text
PowerShell_User_List.mkape2a1c8c41b1546310ce5990d509127028ASCII text, with CRLF line terminators
PowerShell_WMIRepositoryAuditing.mkapec4851b95e096788bb236c411cd56a164ASCII text, with very long lines (372)
Powershell_Wireless_Network_Connections.mkapefb3449907fb2d9fd36b77cdd7fa0853fUnicode text, UTF-8 text, with very long lines (400)
Windows_ARPCache.mkape68b67be41ad097b0505220f384aa7887ASCII text
Windows_DNSCache.mkape1538c0a464d5d58c7975233ee8b9022bASCII text
Windows_GpResult.mkapee5cb1a80f38eab85c9bc301eb20de5e4ASCII text, with CRLF line terminators
Windows_IPConfig.mkape5274927ad218eb0c896835bd666e9090ASCII text
Windows_ManageBDE_BitLockerKeys.mkape9973b8e293ab19752a0cbf71a055b4caASCII text
Windows_ManageBDE_BitLockerStatus.mkapebd55fbdcff421fb20d91026000b1e3c8ASCII text
Windows_MsInfo.mkape9e0b8e4328a9b2ec985962f1b446482bASCII text, with CRLF line terminators
Windows_NetStat.mkape1b0c4e00020455348a334b07f90e1e62ASCII text
Windows_Net_Accounts.mkaped3816f61fb7695e0929c03037195be43ASCII text
Windows_Net_File.mkapee5b9cf98ef6515c61602dc5cc134e7d8ASCII text
Windows_Net_LocalGroup.mkape66028f9e156ce965af19e941a9e65de2ASCII text
Windows_Net_Session.mkape52e0cbc25c28db4a183ff653a08fdda6ASCII text
Windows_Net_Share.mkape28514c49403b0d2eac34d0960382316aASCII text
Windows_Net_Start.mkapec1d173e6a6f4a963f76f7c07e1aee966ASCII text
Windows_Net_Use.mkape64b3cc603fec640cee8f4c99a6b23732ASCII text
Windows_Net_User.mkapee3a6e2cfa24032986dc684f785e843f4ASCII text
Windows_RoutingTable.mkapeef37b93d74e5dfa5e9eb6713d4052bc1ASCII text
Windows_SystemInfo.mkapeac8e10929d7f6fff2747b8b94a023012ASCII text
Windows_nbtstat_NetBIOSCache.mkapeb7e12050dfe910e898d176ddd2da39a5ASCII text
Windows_nbtstat_NetBIOSSessions.mkape57c1275868f542d35cdfab0741bd311aASCII text
Windows_netsh_portproxy.mkape31b9c860c7aab11de8738c989f6c4e79ASCII text
Windows_qwinsta_RDPSessions.mkapea43ca741bea0580d32c92749d05e9147ASCII text
Windows_schtasks.mkapeee8e5b4e8d991c723f23d7a009aab350ASCII text
README.md4845eecbaf5de4794560b693a38072d0HTML document, Unicode text, UTF-8 text, with very long lines (315)
!KapeTriage.tkapee099a8c81f0b92d3b468fee05c7eb042ASCII text
AppData.tkapeb9abdc8ddac9b00abf4e2e99c49240d9ASCII text, with CRLF line terminators
DirectoryTraversal_AudioFiles.tkape8cb3a33cca066057ddf7bc5d06f1fe8eASCII text
DirectoryTraversal_ExcelDocuments.tkapeb225b5b80fd9dc5887576cd442dd2343ASCII text
DirectoryTraversal_PDFDocuments.tkapec7e90b77953c0525409a8c8138578792ASCII text
DirectoryTraversal_PictureFiles.tkapeaf86e59fee3d659b5bd82e08fdada2fcASCII text
DirectoryTraversal_SQLiteDatabases.tkape8af0161561e8ced62fd93e1580ee64f7ASCII text
DirectoryTraversal_VideoFiles.tkape6f8255ba2bd7a08714056333a7371d59ASCII text
DirectoryTraversal_WildCardExample.tkapef3eeed77adc9fa814c05bdd8783392d6ASCII text
DirectoryTraversal_WordDocuments.tkapea4c466852d21b719ed6663e8aceef1ccASCII text
LiveUserFiles.tkape0502ca62944aa1c7d292e1b81dd30916ASCII text
AVG.tkapeeee8dd38cf20dcb1b5c9eae299c754a6ASCII text, with CRLF line terminators
Avast.tkapeb999dee150e842f336ce61f878b174b8ASCII text
AviraAVLogs.tkaped3fdd7a537f7fd8a433b27cda9d70f07ASCII text
Bitdefender.tkapebfe5d4cb90c05c3ce7d362d984b86241ASCII text
Combofix.tkape9eaa6b89219a92551c144e50e743c504ASCII text
Cybereason.tkapeab0246df02a58d79856006111cf6714fASCII text
Cylance.tkape4ec66d03ef51162a97faf9dbc7f4aad6ASCII text
ESET.tkape37b7da1e223a5046b97f357d5799c806ASCII text
Emsisoft.tkape7bed8fa8a151836dd9d6e006d40f5426ASCII text, with CRLF line terminators
FSecure.tkape48f0dda3d6287fdf4608d6c4bc010e1cASCII text
HitmanPro.tkape06084ccdd164e02e50173e1b2bb67f26ASCII text
Malwarebytes.tkape4b3ac5e52f9271def13a09d002219fa0ASCII text
McAfee.tkape841310ebada24f557c429ce6f8dc0afcASCII text
McAfee_ePO.tkapef255d2da120790728bdb34164c58a5c0ASCII text
MicrosoftSafetyScanner.tkapec41eab40416fdd4f10a8cae19febe229ASCII text
RogueKiller.tkapeaf94d6d3e6e1067bbb13d1e0632d2b2eASCII text
SUPERAntiSpyware.tkape2e6070b9251b3d24fc478bf5929a1894ASCII text
SecureAge.tkaped85b318b2f0d46ab276f1e3a84e84b0aASCII text
SentinelOne.tkape5c638a4c861386061f3309e02a69a2f1ASCII text
Sophos.tkape2ba278abade7bc0272c705cdfacb5437ASCII text
Symantec_AV_Logs.tkape752cd3a36f15d03d01f5f2b2c14f4640ASCII text
TotalAV.tkape58f1654a5a3235ada67d6ab2a36c839fASCII text, with CRLF line terminators
TrendMicro.tkapefceab95544d50d200cec71b2363b0356ASCII text
VIPRE.tkape5d4e15d1b038bc59249e18bfaf7bb233ASCII text
Webroot.tkapeac2f6ee8ac68d2f76d9baa5bce73a802ASCII text
WinDefendDetectionHist.tkape7d7c5bad60bb254dc43ff1b735adcd0dASCII text
WindowsDefender.tkape6b7d786c562d83d86ea89f7e4b38dd76ASCII text
1Password.tkape4933bf28c68cda01d4fcc2aae62542e3ASCII text
4KVideoDownloader.tkape77135986b5d3ec9402bee8fd55636e2dASCII text
AceText.tkape012b48d6475d7d0047e3f0ce1fea3d8eASCII text
AcronisTrueImage.tkapecfaaa676986088c96a2eceeaf6ef5018ASCII text
Action1.tkape1c8b470f399d4eda65aa0c06f8c6d6eaASCII text
AgentRansack.tkape11d1904c1817cfc35756f0163e3dcb7dASCII text
Ammyy.tkape1b2acac2993bcc488ada368b1867badbASCII text
AnyDesk.tkape3dc9016ed975297433203fd4ae09ee1eASCII text
AsperaConnect.tkape70822a02c647c424dc38309c157ea30aASCII text, with CRLF line terminators
AteraAgent.tkape684347d75eaa686cd0fb73e6d4ff481aASCII text
BoxDrive_Metadata.tkapedd6efbeb94047f7e0194d8e0b721565dASCII text
BoxDrive_UserFiles.tkape5be58762952653c9c1efba7059b6b33fASCII text
CiscoJabber.tkape82a8b9cc76575476968f9385eafa4799ASCII text
ClipboardMaster.tkapeeb7481ebc913f9eae0e0480c081423a5Unicode text, UTF-8 text
ConfluenceLogs.tkape97ee212fea1e57b01f58598831afede3ASCII text
DWAgent.tkapea026139b85b741a548843222f3b0a3c4ASCII text
DirectoryOpus.tkape7388b9c69c25b6c4d7e87f51e06981c7ASCII text
Discord.tkapeaa2d18297ff0e672e237696609826dafASCII text
DoubleCommander.tkape136db0da026300458a6e4fe2358d161bASCII text
Dropbox_Metadata.tkape7984f4226a464b7be95ada7087a16c46Unicode text, UTF-8 text, with very long lines (400)
Dropbox_UserFiles.tkapeabfd960faaab0a61de1cd43a990230e7ASCII text
EFCommander.tkape33356430febf4338b248ae3a0afb6f3aASCII text
Evernote.tkape41adcfcfb4c8099628cc5dbb5a1636c8ASCII text
Everything (VoidTools).tkape024bb0d4d6161286964c07524720ef98ASCII text
Fences.tkape9d033e2fa7be1ada9f9277d72b6e0eb9ASCII text
FileZillaClient.tkapec7bb172a4d9231664a379fbf9910bc52ASCII text
FileZillaServer.tkape14a16c03d8d0df1e261b05f46169a4baASCII text
FreeCommander.tkape46ab1aaa5229d195489bb6cf756c2bf9ASCII text, with very long lines (337)
FreeDownloadManager.tkape5d09d14cda4678893805ada723606591ASCII text
FreeFileSync.tkape54b085e0ecc816e13de83f3ce29eeff2ASCII text, with CRLF line terminators
GoogleDriveBackupSync_UserFiles.tkape0fd562d234846a2cf884f10be35f2cb8ASCII text
GoogleDrive_Metadata.tkape230575f2af4ac4fa8cd5985580512233ASCII text
GoogleEarth.tkapea8dea3b3e5fb481dc28b4ea8af2a84dbASCII text
HeidiSQL.tkapebbffb8172283fddab600f4647efa600dASCII text
HexChat.tkape84a78009b45c775ca736ba506502ace4ASCII text
ISLOnline.tkapef25bef1f60e3f989801153f0c2f8b2c7ASCII text
IceChat.tkape952a503db46fea2a0568ac631913f94eASCII text
Idrive.tkape043fe369127305cc2527c4ffa674db91ASCII text
ImgBurn.tkape220291aed35ce85c8717f90db98c752cASCII text
IrfanView.tkape1d7a45403dc61e4a9631b09150625380ASCII text
JDownloader2.tkape6726918e27d94e053f54cc7b23c3d0d3ASCII text
JavaWebCache.tkapefa60deb4ecee08e399ad19222e6b6279ASCII text
Kaseya.tkapee2d8170510ad4c79136306023bf94d80ASCII text
Keepass.tkape48d39019cf4f4c31e56a6dd158aecd00ASCII text, with very long lines (403), with CRLF line terminators
KeepassXC.tkapeaf5f797b3897f3877687dbc14f873564ASCII text, with CRLF line terminators
Level.tkape562999dc047febc97fadc3429e81e80cASCII text
LogMeIn.tkape94fd1bf03fcc60ba99ba9b1401d631f4ASCII text
MacriumReflect.tkape74f15192841bf2e7e381ed448b7af1d6ASCII text
Mattermost.tkape80bc93c9a355699da78089d3b099c388ASCII text
MediaMonkey.tkape8eff34fd1d393070b7ad4ebfdc30f47dASCII text
Megasync.tkapee3707fc84f7f98ab3077996cd627a2aeASCII text
MeshAgent.tkapeeb9450e35094ad49340d66afbd589c2bASCII text
MicrosoftOneNote.tkape36e91bca163da53a4113f10e15947bc6ASCII text
MicrosoftStickyNotes.tkapee26081037c693a37a54b5436e176ec6aASCII text
MicrosoftTeams.tkape80a05e6a983df3f672e85b79b59c603fASCII text
MicrosoftToDo.tkape39a50380b9178a4c223201f1cd61250dASCII text
MidnightCommander.tkape6d57e4b5196ba41d86ea798bf8a62787ASCII text
MultiCommander.tkape05363658ccdb4ee9bfd8fefc2575680aASCII text
Nessus.tkape3654743b12e10acbd71116da201acd97ASCII text
NetMonitorforEmployeesProfessional.tkape007da95c16c50d75c696f538d0dcf380ASCII text
Notepad++.tkapeadbfe3e79e2e472a04cff91a0141d050ASCII text
Notion.tkape0246301fb10b714b9580c43db70d5132ASCII text
OneCommander.tkape1be455d57851e9f0508722383e5e5e39ASCII text
OneDrive_Metadata.tkapebe367d916a5db616e362821c44ea111cASCII text
OneDrive_UserFiles.tkape1558dae3f290cc06beab763561f35c42ASCII text
OpenSSHClient.tkapeb4ac7573b4bb7bb5e5dda1d24ae7370dASCII text
OpenSSHServer.tkapea42660c42992d09129c554de04ffc66aASCII text
OpenVPNClient.tkape0fc0623a4b3cb151fefad3aecfcd61beASCII text, with CRLF line terminators
OutlookPSTOST.tkape9c34f85dbb42faba109bed4ea91eb9b1ASCII text
PeaZip.tkaped4d3deca471723566dfee252a20cd1afASCII text
ProtonVPN.tkape53b4b36a62c5396251669d1a7f3c6e2eASCII text
Q-Dir.tkape00bb65821e431fae3aca30166e8a7e1aASCII text
QFinderPro (QNAP).tkaped4581054b77ebbffd0146145253f3edaASCII text
QlikSense.tkapee14888ac4b6227c7bc7f52dd1ddccb7dASCII text
Radmin.tkapee3981e7add161393c647f927d7163fccASCII text
RcloneConf.tkape5e44a522e90ed658b5a23c180fbcd4b7ASCII text
RemoteUtilities_app.tkapec63c9068b44188cef2c30f818a001c16ASCII text
Robo-FTP.tkape0468bda5c35f2689f10fb9bcfff763c2ASCII text
RustDesk.tkape954dba5cdda160617ae3e09088f1f51fASCII text
ScreenConnect.tkape9d73dcb41d5350d0f20e523236ceeaacASCII text
ShareX.tkape85d2418a2987739e9a892cfdd9d4f2ddASCII text
SiemensTIA.tkapef0531a1eb5fbc0bd28b341a2c49eed7dASCII text, with CRLF line terminators
Signal.tkapedb2e7f09cfcb23868ae03f85191e2f64ASCII text
Skype.tkape7f0f0be0dba779b12839a60eec27c273ASCII text
Slack.tkape243a1c9ac1cb2939154e61216e064255ASCII text
Snagit.tkapec98dbd40b42f7f0b2af44e329c959667ASCII text
SpeedCommander.tkape265b3c002ed1628c878bfb1300850956ASCII text
Splashtop.tkapea6f114879961a244e19a41604bc0643bASCII text
Steam.tkape450708d662c8d91db3fae66700e9f43aASCII text
SublimeText.tkapef866de03946443bcdc4e016c9c10fa5aASCII text, with CRLF line terminators
SugarSync.tkape2bb926078d8be1545e353a9799730651ASCII text
SumatraPDF.tkapea746bc8d40c2847e8503c087d24a22fdASCII text
SupremoRemoteDesktop.tkape2d2af626d72dda2a012aa9fccc53e9ebASCII text
TablacusExplorer.tkapeafb9640ba1d595f27a4de4bc4575887eASCII text
TeamViewerLogs.tkape5f45eb3f6e56603dd0c579702102e768ASCII text
Telegram.tkapec86cc01a67fb4ff1d9c1dc4c6a9d1047ASCII text
TeraCopy.tkape7ed092a2a9d9536aa8be1752a154d5c3ASCII text
Thunderbird.tkape4537ec80e47ffd2a25e430ce7ba6f7ceASCII text
TotalCommander.tkapece448b732dd511501c7908870a68144fASCII text
TreeSize.tkape7cf37a595e0a6463be32f288abd55b6fASCII text
UEMS.tkapee6f3092cfc4a5519a09be2ed8e1ef8ddASCII text
Ultraviewer.tkapecb495f60b2fc536dd9f7996e7f8d571eASCII text
VLC Media Player.tkape2c05a4bda7a04db893b0b417b397c37fASCII text
VMwareInventory.tkapec607be935bb81613ffa4768d65438048ASCII text
VMwareMemory.tkape39de8b9917e8779796632750f437418eASCII text
VNCLogs.tkapee67a451724d3f6420f2ec6709a9e9f45ASCII text
Viber.tkapeafcd325090821cc8b0754957b65a7c42ASCII text
VirtualBoxConfig.tkapee90ae70ec3946e94440e8f5725c6fd05ASCII text
VirtualBoxLogs.tkapecc1584900211ec6061d36c1c63afd5f7ASCII text
VirtualBoxMemory.tkape3b8c67f8105e7c891e5a1b32b52fd205ASCII text
VisualStudioCode.tkapeb9079f2a6995346abe65e7ed52006734Unicode text, UTF-8 text
WhatsApp.tkape612cfadb56285f3dfed4756b240cd654ASCII text
WhatsApp_Media.tkape82eb8196fb12d25a5999a5929b17897fASCII text
WinSCP.tkape16bc90df17dbb710edc0634eb7597b16ASCII text
WindowsYourPhone.tkapec1ca2caf373128dce7536526a835f7d5ASCII text
XYplorer.tkapecdf1013219b309b9df61621d44e8df54ASCII text
Xeox.tkape1094ad045438cf57e11406b2876afa82ASCII text
ZohoAssist.tkape4be9f80e753378bc45b04db4177b42ebASCII text
Zoom.tkapeeb09607e775bcd437a3dda69b0118f35ASCII text
iTunesBackup.tkape3ced4db297745fbc8a5421dd3e2b82abASCII text
mIRC.tkape4bd3dd5b34f5cdcddf47ef2d9a040978ASCII text
mRemoteNG.tkape7930b69dff065f92940dc8be61641dc2ASCII text
pCloudDatabase.tkape3e5232fb8b749e1b110843c2f648a32eASCII text
BraveBrowser.tkape5ba41a9b763360f090ee9d29a909e0ccASCII text
BrowserCache.tkapeec42e50f00f2c4331d9f58f8384521c3ASCII text
Chrome.tkape10e87f278fae949912bedfb04f3273aaASCII text
ChromeExtensions.tkape9994f77a00d6b6de7b29ac7994591eb6ASCII text
ChromeFileSystem.tkape4664669b1f0021f64b1c8a17c29bc458ASCII text
Edge.tkape9aae688a205eb7199f999cbba46376daASCII text
EdgeChromium.tkapece49e298d8c972e603d3bedf27eaec56ASCII text
EdgeChromiumExtensions.tkape2fed1759c51d44908d5b4cd57f987213ASCII text
EdgeFileSystem03b2f10e71d5843c3feaf526dd3170ffASCII text
Firefox.tkape71e7276817c9b07bc8f8f34124656bb6ASCII text
InternetExplorer.tkape82cee7fef8008e4e1bd6422f3319ed11ASCII text
Opera.tkapec9e21b4a7fe6a6f75bbe7ad2f18944b3ASCII text
PuffinSecureBrowser.tkapeb2e9af2376f7ee94bc9f8a5a0267272aASCII text, with very long lines (341)
Vivaldi.tkapecb9f23c7f50d923df75dbea57df8a61aUnicode text, UTF-8 text
Yandex.tkape2e707379b8868bb5f6b0d0f48a89dfd3Unicode text, UTF-8 text
!BasicCollection.tkape3a4b3f81b34cf8cb6b441ae7b79d12d5ASCII text
!SANS_Triage.tkape69ae8157d48b9292516a872885d6ee32ASCII text
Antivirus.tkape75f7660ecbc5e65fc61e9a2b8484d47dASCII text
CloudStorage_All.tkapedcb59f055d7d7121e6333308cd10fcfdASCII text
CloudStorage_Metadata.tkape4de36d44a3e35e1e2853ff9d1f288582ASCII text
CloudStorage_OneDriveExplorer.tkapedd9db24862b333c3bd1b3a4b8cd5d108ASCII text
CombinedLogs.tkape2774661d2a24d9378598d4a25c78507fASCII text, with CRLF line terminators
EvidenceOfExecution.tkape3e17930e663196a995f756a5f82985edASCII text
Exchange.tkapefa6515e0b27e6dc7e2b1603d2d1ee756ASCII text
FTPClients.tkaped3f81d68acf43e0f57d32fb280a21a73ASCII text
FileExplorerReplacements.tkape324089fe9016efbabd8ffc10f6816ba9ASCII text
FileSystem.tkapeb52edf7bb6fd240d9e9500aa5466d764ASCII text
IRCClients.tkapefaf4df2b7fd310816843770e9a089d66ASCII text
KapeTriage.tkape77c51a886441dda8eab704002da379ebASCII text, with very long lines (458)
MessagingClients.tkape18b0f2e130c81046615a18d1f4bc85c4ASCII text
MiniTimelineCollection.tkapeb0a5d414239c1bb41dad699f28ef3451ASCII text
P2PClients.tkape4204a9b8a966ed09e5933e1b970f41b2ASCII text
RecycleBin.tkapeb65cbfbf12897de286cb17c51392879cASCII text
RegistryHives.tkapebe18356c23ea8a7a6f8e468f48d7a67dASCII text
RemoteAdmin.tkaped929eea75cb88aae29c943466103f486ASCII text
SOFELK.tkape15e87d80613aad72f944d772bbff6dedASCII text
SQLiteDatabases.tkape7014c81b1e03e0ece1695a2b98d4c578ASCII text
ServerTriage.tkape99eff8fde90f52d36d88c7c82b8c1157ASCII text
TorrentClients.tkape01e8d18b6110275846ecbf1b22571f9dASCII text
USBDetective.tkape185b1e378c4401996b92909bd3903732ASCII text
UsenetClients.tkape0ddcd7f16e6a85a3b358c112ba3e9106ASCII text
VMware.tkapeb2c21ac6f97072ca2b7b6bcb4389f097ASCII text
VirtualBox.tkape1fffc141879a44095dc729456cea0ff8ASCII text
WSL.tkapeee5618ab6604d461fb722c8975acf935ASCII text
WebBrowsers.tkape82fa0e3475af903b684686f865ba4a7aASCII text
WebServers.tkape34b3c1794063911ef7b86a2cc92c315cASCII text
CompoundTargetGuide.guide237ba8131e12a07863f9b6c1d25a82daASCII text
CompoundTargetTemplate.template166d8d54942c1578185383bf4ddef5e5ASCII text
ApacheAccessLog.tkape5ece1037506bdcd2f9282f06dc222d93ASCII text
IISLogFiles.tkape9bd0a9ed574a72c40d79cd9d1a327f4bASCII text
MSSQLErrorLog.tkapeb376a3bfefeac6c56a7ade906e8bafccASCII text
ManageEngineLogs.tkapea4bfe77f649acce8bd8e1365dace0af8ASCII text
NGINXLogs.tkape2966fe72f8443515f23fd200c160ce22ASCII text
PowerShellConsole.tkapee8c9e50fa899a978f924c2adb4ea337bASCII text
BitTorrent.tkapea4ebf896bae73821e9d05f8e03b4b23aASCII text
DC++.tkape0177863430ab2ffd7cf9d78151369fd4ASCII text
Freenet.tkapedcfc1828344471ca40498253faf6c885ASCII text
FrostWire.tkapecf136a582961efd81ac981010ba88059ASCII text
Gigatribe.tkape8d129e6e981f7575b1d0309c75ec8d34Unicode text, UTF-8 text
NZBGet.tkapeec1d23dddbf97c05ca20bfeda1a8b2a5ASCII text
NewsbinPro.tkapec264afb644534e4477f9048bb69a1c43ASCII text
Newsleecher.tkapec8733daeb1eac8444ebeb43bae6f73dbASCII text
Nicotine++.tkapee5a631d21845d7d4ed39b42878118222ASCII text
SABnbzd.tkapec664b3b87441ccf27e14a7d573eef031ASCII text
Shareaza.tkape858c15c555f4e09054e62856add51dc6ASCII text
Soulseek.tkape9988d970c7bf01208945cbcd82ded155ASCII text, with CRLF line terminators
Torrents.tkaped8f8d3d6c929700a08adbf3cc77d6fd1ASCII text
Usenet.tkape5295cbd56161b1faba0df3bfd2d7ad53ASCII text
qBittorrent.tkapec737b46760aaca1df9caa11078f959eeASCII text
uTorrent.tkape3d9ba59deefd9c6a0953441411e590c1ASCII text
README.md7706e8be3b6b78e84fb4bf41ca71bc7fASCII text
TargetGuide.guide2b905d468a55791872ad10c8352841e3ASCII text, with very long lines (490)
TargetTemplate.template040b0ee858e96161991e5010b1dddc70ASCII text
$Boot.tkape1b9c80db561dc4db91c39c82be992961ASCII text
$J.tkape2c4cf317a1cb6e657e7ed2bad6a10a2bASCII text, with very long lines (304)
$LogFile.tkape0df889d130d4fb8859a364d774574e5aASCII text
$MFT.tkapedb883dd78b4049d46636a8210f2fca65ASCII text
$MFTMirr.tkaped91253358bb77ed11750146bb1ff60aaASCII text
$SDS.tkape404ef6e23479bc6e19508b6cb197c193ASCII text, with very long lines (302)
$T.tkape2b57db05da7b861daf9a558bfc225671ASCII text, with very long lines (302)
ActiveDirectoryNTDS.tkape195f92114376db0253a11371b550c98dASCII text
ActiveDirectorySysvol.tkape20b65bfcd85ce136eab16fc9f15f4397ASCII text
Amcache.tkape12a4e03099c5c0ece3823b503969406cASCII text
AppCompatPCA.tkapec4c111071605ecaaf43eeb91ff15c5c2ASCII text
AppXPackages.tkape4fd98f6db13d37dbc869784e5326030cASCII text
ApplicationEvents.tkapebf48455e34bef1ed734eccc08e638e09ASCII text
BCD.tkape4f2993a10cf197663c36835bd70f3f04ASCII text
BITS.tkapeec464f3b6ed626434ff9a06c2ccef1d8ASCII text
CertUtil.tkape05b7669f9b0e47a577835a9fe8d0607aASCII text
Drivers.tkapec80998c25a81d4b6f29a4d45f8af7b3fASCII text
EncapsulationLogging.tkapeaed4e8cec8832919f14bf3d883d495bfASCII text
EventLogs-RDP.tkape718af3892626c3703aed3c319232c8d7ASCII text
EventLogs.tkapee294b33fa3212b4911ebaa905a0afbecASCII text
EventTraceLogs.tkape6c7c5efbbf9a55dde1558f9ad9f0c25aASCII text
EventTranscriptDB.tkapee19581d894b9dff4d7c90d1273c896bbASCII text
ExchangeClientAccess.tkape9f417b72bd834c6f5c18050ba44fdd12ASCII text
ExchangeCve-2021-26855.tkape4fcc7a939f0479f87ab9cff759ad7b82ASCII text, with CRLF line terminators
ExchangeSetupLog.tkape61c8fc88cb058c334a2608174c9fc14eASCII text
ExchangeTransport.tkape862a55e4ec7ca3f398d0833b6835be29ASCII text
GroupPolicy.tkape22d286a6f7aa1c3159984bde9c653859ASCII text
IISConfiguration.tkape178821413ede38da9b0622e63367cb1eASCII text
IconCacheDB.tkape20da23589f479b3a17e781817939d75dUnicode text, UTF-8 text
LNKFilesAndJumpLists.tkape4bd997607702acd8c8f4ce2cf2fa868fASCII text
LinuxOnWindowsProfileFiles.tkapef6ff4a6e170e74bd8259eb799f734026ASCII text
LogFiles.tkape6389af39e038d9dde7ddf6f9e94ccdd1ASCII text
MOF.tkapee86d6cf3655911bb4f5392602ba82df2ASCII text
MemoryFiles.tkapedd3f90629864c7bb17175e5799f928b6ASCII text
MicrosoftOfficeBackstage.tkapef4ad86fb29737df3920e968eb88fabc5ASCII text, with CRLF line terminators
NETCLRUsageLogs.tkapea183755a1ecaa7d85f1bf7ff712d554eASCII text
Notepad.tkape13ca9056750f9100b1f9ce684bf87e5fASCII text
OfficeAutosave.tkapeb028a823b3e9ae3f15ad566f9db03204ASCII text
OfficeDiagnostics.tkape02c83284cee4031386e63789c820d0a7ASCII text
OfficeDocumentCache.tkapef2bc4f12b8fc365655de76cc722dcf11ASCII text
PerfLogs.tkapea4a1f97bcc46e0aba9f8aadf0e05b1f8ASCII text
PowerShell7Config.tkape03905cf1d9a2708a2299f7b96146599eASCII text
PowerShellTranscripts.tkape8a37055f5a5f8cf7708b3b88542b8288ASCII text
Prefetch.tkape7d56aa1f1434e77bbd576b65191fd889ASCII text
ProgramData.tkape86f41461a86452f3b90228796ec12817ASCII text
PushNotification.tkapedd83cc8320db02a95ada0037010f114cASCII text
RDPCache.tkapee36657b2da2b457e4df56e3dce9c1a1dASCII text
RDPJumplist.tkapea1a718baab93c04d2cc7c4c1b0297406ASCII text
RDPLogs.tkape2198723b1dcfda52823531e43a8bcd64ASCII text
RecentFileCache.tkapeb0bf1e6a70df0e321ebc0ca63f8bd87eASCII text
RecycleBin_DataFiles.tkape73a65aecf61480a0130c243fee6fee42ASCII text
RecycleBin_InfoFiles.tkape2ac6231e9800ed2029c0f35a9ad6697fASCII text
RegistryHivesMSIXApps.tkape6cd2e8a84f358842d3c03fa8c4b06d64ASCII text
RegistryHivesOther.tkape96d08bad518ef324a11a7342b82740e9ASCII text
RegistryHivesSystem.tkapefae9e6b55b2da2681feaeb7c6990a597ASCII text
RegistryHivesUser.tkapeec3484e31aac6b32cb718b9176076f62ASCII text
RoamingProfile.tkapeb7876d359014e67ab22e39c24c8b6922ASCII text
SCCMClientLogs.tkape5a1bee03da3a11283c66d498f09699c8ASCII text
SDB.tkape688696c38b5503240c66aaef4a0d0982ASCII text
SRUM.tkapea1d89746cc8fdc9b82d761d770bbb09eASCII text
SUM.tkape05df3fa8057ab98c8fc8f810b316415bASCII text
ScheduledTasks.tkape6935beac0dffc925dda7c6a7f23bfff6ASCII text
SignatureCatalog.tkape79a4a3eb9c405741b8e6d50e364404b8ASCII text
SnipAndSketch.tkapee32215c645dd982183477a75f90a9866ASCII text
StartupFolders.tkapeb23d01078103f5bf65fbb73160900f7cASCII text
StartupInfo.tkape5fe0388716a89cadab85ab5ff4f5c275ASCII text
Syscache.tkapefc60a198c2de5d8f6ae49884e32b3a84ASCII text
ThumbCache.tkape894c0ea467e86de70507bc1269abd12cASCII text
USBDevicesLogs.tkapea7e2c092aeb0198db03a75977ac1fb32ASCII text
UsersFolders.tkapedf73282db3559612b212362d55192957ASCII text
VirtualDisks.tkape768d86d5f0d593dea231f4252673a785ASCII text
WBEM.tkapeecf39834de0a5e4e5e0f4d29e5ac8143ASCII text
WER.tkape4000ec4e2f93f55a31947b098e654d16ASCII text
WindowsSubsystemforAndroid.tkapec9239684f5262cafa7a85f677db0f2d9ASCII text
Debian.tkape6b3098cf289aae47461da26d95bf78faASCII text
Kali.tkaped8b46b30022104caed3d2f234efd1977ASCII text
SUSELinuxEnterpriseServer.tkape7fba03402d7658d8a16d2f74f07efd72ASCII text
Ubuntu.tkape57f77383019411d79e902e4495475070ASCII text
openSUSE.tkape4cf5f8dea0af044579e2f90d683d991fASCII text
WindowsCopilotRecall.tkape37b7918279a638cdc24e160274b5d401ASCII text
WindowsFirewall.tkapef995d032a5474b539c6e3436b230280fASCII text
WindowsHello.tkapeccecba013695e0800da2952985176dc7ASCII text
WindowsIndexSearch.tkapeb7252227e489f9b51ec66bdb610c4748ASCII text
WindowsNetwork.tkape7dfd363e7e1e1b69236bd56eb9e49a4cASCII text
WindowsNotificationsDB.tkapec95b92419b15712a283a3e8b396a2d49ASCII text
WindowsOSUpgradeArtifacts.tkapeed32a4e1250e4e2b0649e1e8c6bdbf80ASCII text
WindowsPowerDiagnostics.tkape42ae6a02e0214c01aa3ecb343fc134ddASCII text
WindowsServerDNSAndDHCP.tkape1a0e200577129cb6344540c9194bf5b0ASCII text
WindowsTelemetryDiagnosticsLegacy.tkape3976ac01ca600eefdf08a5483574d943ASCII text
WindowsTimeline.tkapec4e41817c508e345eb2729506526a9b2ASCII text
WindowsUpdate.tkapee96bd12776e59519b1bd1f070b4890d7ASCII text
XPRestorePoints.tkape130d1bb47945d7ca31eff228427d7b33ASCII text
kapeLogo.png404666be1ff287b7b4270dba18dce2adPNG image data, 600 x 394, 8-bit/color RGBA, non-interlaced
training.mda3923a9f6cb26bd3aa9131e192e5841dASCII text, with very long lines (563)

Detections

AnalyzerVerdictAlert
YARAhub by abuse.chmalware
Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen

JavaScript (0)

HTTP Transactions (11)

URLIPResponseSize