A Digital Forensics framework for Windows PowerShell.

Tooling to assist in Azure AD incident response

A Digital Forensics framework for Windows PowerShell.

A Digital Forensics framework for Windows PowerShell.

The module allows a fast and easy way to contain and remediate a threat on a remote host.

PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.

PowerTriage is a lightweight, dependency-free PowerShell script designed for Incident Response (DFIR) on compromised Windows devices. It collects critical artifacts (Network, Process, Persistence, System, Browsers) and packages them for analysis. Features: - Zero Dependencies: Runs on standard PowerShell 5.1+ - Modular: Full or Minimal collection ... More info

Security assessment, threat detection, and continuous monitoring module for Google Workspace, Active Directory, and Microsoft cloud environments. Includes Google Workspace compromise assessment with 23 detection signals, Active Directory reconnaissance (203 security checks across 14 categories including NTLM-relay preconditions, Tier-0 hygiene, tel... More info

A comprehensive PowerShell toolkit for threat hunting, digital forensics, and incident response (DFIR). Provides "Hunt" functions to detect persistence mechanisms, analyze system artifacts, search event logs, and generate detailed forensic reports.