Search Windows forensic artifacts
Browse 363 KAPE artifact definitions, build collection scripts, and convert Sigma rules. All in one place.
Popular:AnyDeskScreenConnectTeamViewerLogsPrefetchAmcacheChromeSRUMEventLogsJumpLists
Tools
Artifacts
Browse 363 Windows forensic artifacts with collection paths, categories, and documentation.
Collections
Pre-built collection profiles for common investigation and triage scenarios.
Script Builder
Pick the artifacts you need and generate a ready-to-run KAPE collection script.
Sigma Converter
Convert Sigma detection rules to SIEM query languages, entirely in your browser.