In the current issue 09/2021 of iX magazine, Gregor Wegberg, Head of Digital Forensics & Incident Response, presents further features of the “Kroll Artifact Parser and Extractor” (KAPE) in his IT forensics tutorial series: Cybercriminals often use manipulated malicious websites or files to gain initial access to a system for an attack. This leaves traces in the browsing history that can be analyzed using KAPE to determine where and when an attack began.
In the current third part of the tutorial, you will learn more about how you can use KAPE to evaluate the browsing history and thus identify the origin of an attack.
Please find the article in full length below (in German only):
- iX 09/2021, S. 132-136: KAPE-Einführung, Teil 3: Browserhistorie auswerten und verstehen – Auf der Suche nach der Quelle (PDF)
Click here to view the full online issue of iX 09/2021 (available in German only).