A Digital Forensics framework for Windows PowerShell.

Minimum PowerShell version


Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name PowerForensics

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deloy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More


Jared Atkinson


(c) 2015 Invoke-IR. All rights reserved.

Version History

Version Downloads Last updated
1.1.1 (current version) 14,010 1/30/2016
1.0.2 129 12/16/2015 42 12/4/2015 15 12/4/2015 18 12/2/2015 21 11/30/2015