EricZimmerman / EricZimmerman/KapeFiles

Small adjustment to azure upload

Open
#816 0 comments 0 reactions 1 assignee Claimed by @EricZimmerman View on GitHub
enhancement
Dominant language
No language data
Stars
874
Forks
234
Avg merge
1h 46m
Merged PRs (30d)
10

Description

### Discussed in https://github.com/EricZimmerman/KapeFiles/discussions/793

Originally posted by **sak-improsec** May 2, 2023
Hi Eric,
My team and I have been using KAPE for almost a year, and have built our forensic platform around it.

One thing I would like to request is the ability for the --asu flag to drop the target and module output in the same folder in Azure, rather than one for target and one for module:

![image](https://user-images.githubusercontent.com/99182650/235453011-128f5370-3195-493e-b59f-1bb2959e24ed.png)

Usecase: Full triage image uploaded to azure, along with live queries from modules like netstat, pslist, ip-config, and so on, and not having to build logic around which live data is correlated with a specific triage image.

My current "solution" is to "sneak" the module output in with the target by setting --mdest to --tdest/moduleoutput/ and as KAPE zips everything in --tdest, everything will be included. But im not a fan of this hacked way of doing it.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.