Incident-Response-Powershell

Powershell Digital Forensics & Incident Response Dieses Repository stellt PowerShell-basierte Incident-Response-Skripte bereit. DFIR-Skript Das Skript DFIR-Script.ps1 sammelt forensische Artefakte auf Windows-Geräten. Zu den Hauptmerkmalen gehören: Sammlung von über 25 potenziellen...

PowerShell Digital Forensics: PowerForensics

PowerShell Digital Forensics The purpose of PowerForensics is to provide an all inclusive framework for hard drive forensic analysis. PowerForensics currently supports NTFS and FAT file systems, and work has begun on Extended File System and HFS+ support. PowerForensics is built on a C Class...