Thomas DIOT

Indeed anything that would make the filename unique would work (prefered solution mentioned timestamps, but a `GUID` or a random number would be fine as well)

The goal would be to do what's being done through `PowerShell_Move-KAPEConsoleHost_history` and [Move-KAPEConsoleHost_history.ps1](https://github.com/AndrewRathbun/DFIRPowerShellScripts/blob/main/Move-KAPEConsoleHost_history.ps1) but directly built-in into `KAPE`. I do know that I can write a program / script to...

Thank you for taking the time to explain the `Move-KAPEConsoleHost_history.ps1` script better than I did @AndrewRathbun! There would be other, arguably less important, text-based artifacts (without parsers to date) that...

> Yeah, I would argue that a simple PowerShell script with an array of keywords, i.e. TeamViewer, AnyDesk, etc, could be compiled and then for each file/folder that matches those...