KAPE Intensive Training and Certification

Online Event

April 12 - December 8, 2022 | (Online Event)

Webcast

The Cyber Risk practice of Kroll is excited to offer virtual sessions of the Kroll Artifact Parser and Extractor (KAPE) Intensive Training and Certification.

Register now
KAPE Intensive Training and Certification

The program will accelerate the learning curve of digital forensic and incident response (DFIR) professionals that need to do triage, collection and processing at lightning speed. Kroll instructors will demonstrate how to utilize KAPE and other powerful tools developed by Eric Zimmerman to collect and process relevant forensic artifacts within minutes, and participants will have the opportunity to take the KAPE proficiency exam to become certified.

Over 93% of participants in previous KAPE Intensive Training and Certification virtual sessions rated the instructors’ clarity and pace, as well as the practice labs “very” or “extremely” helpful. We’ve now expanded the program so it’s more convenient for DFIR professionals worldwide to become trained and certified in KAPE. 

Virtual sessions are limited to a maximum of 25 students to guarantee individual attention to every participant. Register early to secure your spot. 

Available Sessions for North America and EMEA

Region 

Schedule

Instructors

North America

April 12, 2022

10:00 am – 7:00 pm (EST) 

Register now.

Eric Zimmerman

Sean Straw

Andrew Rathbun

North America

June 23, 2022

10:00 a.m. – 7:00 p.m. (EST)

Register now.

Eric Zimmerman

Scott Zuberbuehler

Sean Straw

Andrew Rathbun

North America

September 27, 2022

10:00 a.m. – 7:00 p.m. (EST)

Register now.

Eric Zimmerman

Scott Zuberbuehler

Sean Straw

Andrew Rathbun

North America

December 8, 2022

10:00 a.m. – 7:00 p.m. (EST)

Register now.

Eric Zimmerman

Scott Zuberbuehler

Sean Straw

Andrew Rathbun

EMEA

June 9, 2022

8:00 a.m. – 5:00 p.m. (GMT)

Register now.

James Thoburn

Paul Wells

Guillermo Roman

EMEA

October 4, 2022

8:00 a.m. – 5:00 p.m. (GMT)

Register now.

James Thoburn

Paul Wells

Guillermo Roman 

More dates to be announced. Contact us at [email protected] to book a private session.

About the Program

KAPE is changing the landscape of forensic investigations, as it enables processing of relevant forensic artifacts within minutes. Program participants will learn from Kroll instructors who have extensive experience using KAPE and will have the opportunity to take the KAPE proficiency exam.

For DFIR professionals looking to accelerate digital forensic collection, triage and analysis and attest their proficiency, this course will cover KAPE fundamentals such as:

  • Efficient ways to examine key forensic artifacts like $MFT, $J, Lnk files, Shell bags, Prefetch and others using EZ Tools
  • Understanding the applications of KAPE targets and modules
  • Instruction for how to build targets and modules catered to environments you face most often
  • Exploring the capabilities of KAPE’s graphical interface
  • Targeting specific options such as VSC’s, containers and SFTP
  • Taking advantage of KAPE’s clear command line structure
  • Running a hands-on investigation lab to produce actionable intelligence in 15 minutes or less

Following the training, participants will have the opportunity to take the KAPE proficiency exam. In order to receive certification, a student must achieve a minimum passing score of 80% within two attempts. 

Who Should Attend

Join the professionals in many fields who are already using KAPE, including:

  • Federal agents and law enforcement personnel 
  • Incident responders and digital forensic investigators
  • Information security professionals
  • Incident response team members
  • Media exploitation analysts 
  • U.S. DOD and intelligence community professionals

For additional questions or suggestions, please reach one of our KAPE experts at [email protected].

2022-04-12T00:00:00.0000000 2022-12-08T00:00:00.0000000 /-/media/kroll-images/events/kape-event.jpg /en/insights/events/2022/kape-intensive-training-certification event {09213578-A7CA-4DD8-AE97-7476022C89D6} {7EC13A8A-F86F-4AEB-8B10-1EE5D7371F2D} {E39587AD-8F0B-4FE2-865F-969BC5501096} {3A077BFC-C74A-40AF-A14C-13BCF6E3873E} {F7669293-38FA-4E53-9244-F89C953E8631} {2DEEE4D2-8278-4C50-B3FF-1563BB257804}
Connect with us
Eric Zimmerman is a Senior Director
Eric Zimmerman
Senior Director
Cyber Risk
New York
Phone

Stay Ahead with Kroll

Kroll Artifact Parser And Extractor (KAPE)

Find, collect and process forensically useful artifacts in minutes.

Kroll Responder

Stop cyberattacks. Kroll Responder managed detection and response is fueled by seasoned IR experts and frontline threat intelligence to deliver unrivaled response.

Cyber Risk

Incident response, digital forensics, breach notification, managed detection services, penetration testing, cyber assessments and advisory.

24x7 Incident Response

Enlist experienced responders to handle the entire security incident lifecycle.

Penetration Testing Services

Malware. Ransomware. Social engineering schemes. Brute force attacks. How confident are you that your protective measures are effective against current and emerging cyberattacks?