IncidentCapsule

1.2.0

IncidentCapsule.psd1

                                @{

    RootModule        = 'IncidentCapsule.psm1'

    ModuleVersion     = '1.2.0'

    GUID              = 'f4f29bb2-65a6-4e50-8548-4547f4d4f9e6'

    Author            = 'xGreeny'

    CompanyName       = 'Community'

    Copyright         = '(c) 2026 xGreeny and Incident Capsule contributors. MIT License.'

    Description       = 'Read-only Windows first-response evidence collection with offline reporting and hardened SHA-256 integrity verification.'

    PowerShellVersion = '5.1'

    CompatiblePSEditions = @('Desktop', 'Core')

    FunctionsToExport = @(

        'Export-IncidentCapsuleData',

        'Get-IncidentCapsuleProfile',

        'Invoke-IncidentCapsule',

        'Test-IncidentCapsuleReadiness',

        'Test-IncidentCapsuleIntegrity'

    )

    CmdletsToExport   = @()

    VariablesToExport = @()

    AliasesToExport   = @()

    PrivateData = @{

        PSData = @{

            Tags = @(

                'IncidentResponse', 'DFIR', 'Windows', 'PowerShell', 'Triage',

                'SecurityOperations', 'Evidence', 'Forensics', 'BlueTeam'

            )

            LicenseUri   = 'https://github.com/xGreeny/incident-capsule/blob/main/LICENSE'

            ProjectUri   = 'https://github.com/xGreeny/incident-capsule'

            ReleaseNotes = 'Evidence depth and authentic handoff: InstalledSoftware, Certificates, ExecutionArtifacts, and Devices collectors, detached CMS manifest signing with -SigningCertificate and -RequireSignature, JSONL evidence export, extended lateral-movement event channels, and PowerShell Gallery distribution.'

        }

    }

}