dfirhub

WebServers

CompoundCompoundv1

Author: Eric Capuano

description

Logs from all known web server applications and supporting services

includes (0)

paths

$ no file paths defined for this target

collection commands

# PowerShell Collection Script
# Target: WebServers (Compound Target)
# Use KAPE for compound target collection:
# kape.exe --tsource C: --tdest D:\Evidence --target WebServers

Write-Host "For compound targets, use KAPE directly for best results." -ForegroundColor Yellow

Save as .ps1 and run as Administrator. Use: powershell -ExecutionPolicy Bypass -File script.ps1

Note: This is a compound target that references 4 other targets. KAPE will automatically collect all referenced artifacts.

references