Kroll Artifact Parser and Extractor (KAPE)

learn.duffandphelps.comsite

Triage program.

similar

KAPE kroll.com
site category #incident-response link ↗

Kroll Artifact Parser and Extractor (KAPE) by Eric Zimmerman. A triage tool that finds the most prevalent digital artifacts and then parses them quickly. Great and thorough when time is of the essence.
CAPEC - Common Attack Pattern Enumeration and Classification capec.mitre.org
site category #malware-analysis link ↗
KAPE kroll.com
site category #malware-persistence link ↗

The tool allows collecting various predefined artifactgs using targets and modules, see KapeFiles which include persistence mechanisms, among others there's a collection of LNK files, scheduled task files and scheduled task listing or a WMI repository auditing module.
PEDA github.com
tool category #ctf link ↗

GDB plugin (only python2.7).
Understand the Test Anything Protocol effectiveperlprogramming.com
site category #tap link ↗
ExPcap github.com
tool category #elixir link ↗

PCAP parser written in Elixir.

CTF › Forensics: “Triage program.”