KAPE
The tool allows collecting various predefined artifactgs using targets and modules, see KapeFiles which include persistence mechanisms, among others there's a collection of LNK files, scheduled task files and scheduled task listing or a WMI repository auditing module.
- from
- Malware Persistence
- added
- 2026-10-10
- likes
- 0
similar
-
KAPE kroll.com
Kroll Artifact Parser and Extractor (KAPE) by Eric Zimmerman. A triage tool that finds the most prevalent digital artifacts and then parses them quickly. Great and thorough when time is of the essence.
-
-
ZKEACMS github.com
-
CAPEC - Common Attack Pattern Enumeration and Classification capec.mitre.org
-
-
CAPA github.com
detects capabilities in executable files. You run it against a PE, ELF, .NET module, or shellcode file and it tells you what it thinks the program can do.
Malware Persistence › Collection > Windows: “The tool allows collecting various predefined artifactgs using targets and modules, see KapeFiles which include persistence mechanisms, among others there's a collection of LNK files, scheduled task files and scheduled task listing or a WMI repository auditing module.”