KAPE x Plaso = Hero - A Automated experience of processing KAPE Targets or E01 Images
Enter the Path where the Collections (Collections/Target/.zip) is located. This Target is the result of a Kape collection (SANS Target e.g.)
Powershell Path Variables:
- KAPE.exe
- MFTEcmd.exe
- 7z.exe
WSL:
- Ubuntu with plaso installed
Future:
- Windows Plaso mode (
-w) -p Path: Path to Collections folder
Feel free to add issues for requests and bug fixes