Kroll Artifact Parser and Extractor (KAPE) Training

Learn how to jumpstart your forensic investigations and find meaningful data fast with a live KAPE training session led by a Kroll instructor. We have a range of options to meet your requirements, from introductory lunch and learn sessions covering the fundamentals to intensive half or full-day sessions with hands-on tutorials.
Group Bookings for Large Groups

Since its introduction in 2018, Kroll Artifact Parser and Extractor (KAPE) has been adopted by a wide variety of government, law enforcement, and military organizations as well as commercial enterprises.  KAPE is also currently covered in various courses offered by the SANS Institute.  KAPE is the future of forensic investigations as it enables forensics teams to collect and process forensically useful artifacts within minutes.  

Practical Training in KAPE – The Future of Forensic Investigations

Make predefined targets and modules work for you
Make predefined targets and modules work for you
Customize KAPE’s full forensic triage/analysis capabilities
Customize KAPE’s full forensic triage/analysis capabilities
Run hands-on investigation labs on real-world challenges
Run hands-on investigation labs on real-world challenges
Trainers are highly experienced frontline responders
Trainers are highly experienced frontline responders

KAPE is a free download that is actively updated with input from Kroll frontline responders and the DFIR community.  For those users who want to accelerate their learning curve, Kroll offers three training options, each designed to meet different goals and needs.

KAPE Intensive: Half-Day or Full-Day Sessions

For teams looking to expedite digital forensic triage and analysis, the half-day and full-day sessions cover fundamentals as well as hands-on exercises. Sessions will cover:

KAPE Intensive: Half-Day or Full-Day Sessions

KAPE Fundamentals: Lunch and Learn

KAPE Live Training Packages - Cyber Risk - Kroll

Learn the myriad applications of KAPE targets and modules in this two-hour session conducted by a Kroll instructor: 

  • Review targets and modules functionality
  • Understand capabilities of KAPE’s graphical user interface
  • Live KAPE demo against E01 data set
  • $325 per student; 5 student minimum*

Who Should Attend

KAPE Live Training Packages - Cyber Risk - Kroll

Join the professionals in many fields who are already using KAPE, including: 

  • Federal agents and law enforcement personnel 
  • Incident responders and digital forensic investigators 
  • Information security professionals
  • Incident response team members
  • Media exploitation analysts 
  • U.S. DOD and Intelligence Community professionals
 
Interested in Using KAPE in Your Practice?
  • As a reminder, KAPE is free for any local, state, federal or international government agency. KAPE is also free for educational, research and internal company use.
  • KAPE requires a enterprise license when used on a third-party network and/or as part of a paid engagement.
  • Packages can include enterprise license, training and certification. 

Read more about KAPE enterprise licenses here.

 
 
Faster Forensic Answers Start Here

Whether you’re up against cyberattackers or internal bad actors, KAPE will jumpstart your forensic investigations and get you to the data (and answers) you need faster than traditional means. Talk to one of our KAPE experts today to request a course outline, schedule a training session, or customize a session that fits your team’s needs.

All KAPE training is delivered by Kroll instructors. 

 

For Group Bookings, Fill Out the Below

We will use this information to respond to your inquiry and process your data in accordance with our privacy policy.

Kroll Artifact Parser And Extractor (KAPE)

Find, collect and process forensically useful artifacts in minutes.

KAPE Enterprise License

For individuals or business interested in using KAPE for commercial purposes.

KAPE Resources

The latest KAPE tutorials, webcasts and guides created by Kroll instructors.