KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#developer-tools #typescript #dsh #dsh-plugin #ai-agent #codex #ai-agents #deepseek-harness #claude-code #cli #react #mcp

KAPE-EZToolsAncillaryUpdater

★ 61 Open GitHub ↗

A script that updates KAPE (using Get-KAPEUpdate.ps1) as well as EZ Tools (within .\KAPE\Modules\bin) and the ancillary files that enhance the output of those tools

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# KAPE-EZToolsAncillaryUpdater
A PowerShell script that updates [KAPE](https://www.kroll.com/en/insights/publications/cyber/kroll-artifact-parser-extractor-kape) (using `Get-KAPEUpdate.ps1`) as well as [EZ Tools](https://ericzimmerman.github.io/#!index.md) (within `.\KAPE\Modules\bin`) and the ancillary files that enhance the output of those tools.

## What Does "Ancillary" mean?

Per Oxford, `ancillary` means:
  
> providing necessary support to the primary activities or operation of an organization, institution, industry, or system.
    
Used in a sentence:
    
> the development of ancillary services to support its products

In the context of this script, KAPE [Targets](https://github.com/EricZimmerman/KapeFiles/tree/master/Targets)/[Modules](https://github.com/EricZimmerman/KapeFiles/tree/master/Modules), [EvtxECmd Maps](https://github.com/EricZimmerman/evtx/tree/master/evtx/Maps), [SQLECmd Maps](https://github.com/EricZimmerman/SQLECmd/tree/master/SQLMap/Maps), and [RECmd Batch files](https://github.com/EricZimmerman/RECmd/tree/master/BatchExamples) are ancillary to their respective tools. Each of these files enhance the output of their respective tools. Keeping them updated is often overlooked but very important to ensuring that you're benefitting from the latest features/bug fixes from [Eric Zimmerman](https://github.com/EricZimmerman) and the latest work from the DFIR community.

## Where Do I Run the Script From?

![ScriptLocation](https://raw.githubusercontent.com/AndrewRathbun/KAPE-EZToolsAncillaryUpdater/main/Pictures/ScriptLocation.jpg)

Right-click -> `Run with PowerShell` and let it ride!

## Usage Examples

As of version [4.0](https://github.com/AndrewRathbun/KAPE-EZToolsAncillaryUpdater/releases/tag/4.0) and newer, all you have to is run the script by itself without any arguments, unless you want to leverage `-silent` or `-DoNotUpdate`.

### Current Switches

* `-silent` - Disable the progress bar and exit the script without pausing in the end

Example: `.\KAPE-EZToolsAncillaryUpdater.ps1 -silent`

* `-DoNotUpdate` - Use this if you do not want to check for and update this script (KAPE-EZToolsAncillaryUpdater.ps1)

Example: `.\KAPE-EZToolsAncillaryUpdater.ps1 -DoNotUpdate`

## Disclaimer (.NET 6)

Make sure you have the [.NET 6 Runtime](https://dotnet.microsoft.com/en-us/download/dotnet/6.0) installed prior to using the .NET 6 version of EZ Tools with KAPE! As of version [4.0](https://github.com/AndrewRathbun/KAPE-EZToolsAncillaryUpdater/releases/tag/4.0), this script will only download and update the .NET 6 version of EZ Tools.

# Improving the Script

Do you see something that could be done better with this script? Create an [Issue](https://github.com/AndrewRathbun/KAPE-EZToolsAncillaryUpdater/issues) or do a [Pull Request](https://github.com/AndrewRathbun/KAPE-EZToolsAncillaryUpdater/pulls), if so! This is the first script I've put together on my own so I have no doubts there's room for improvement. Anything that moves the ball forward and helps the DFIR community I will always be in full support of!

KAPE-EZToolsAncillaryUpdater

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README