Incident-Response-Powershell

Powershell Digital Forensics & Incident Response Ce dépôt fournit des scripts de réponse aux incidents basés sur PowerShell. Script DFIR Le script DFIR-Script.ps1 collecte des artefacts forensiques sur les appareils Windows. Les fonctionnalités clés incluent : Collecte de plus de 25 indicateurs...

PowerShell Digital Forensics: PowerForensics

PowerShell Digital Forensics The purpose of PowerForensics is to provide an all inclusive framework for hard drive forensic analysis. PowerForensics currently supports NTFS and FAT file systems, and work has begun on Extended File System and HFS+ support. PowerForensics is built on a C Class...