A Digital Forensics framework for Windows PowerShell.

Tooling to assist in Azure AD incident response

A Digital Forensics framework for Windows PowerShell.

A Digital Forensics framework for Windows PowerShell.

The module allows a fast and easy way to contain and remediate a threat on a remote host.

PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.

Security assessment, threat detection, and continuous monitoring module for Google Workspace, Active Directory, and Microsoft cloud environments. Includes Google Workspace compromise assessment with 23 detection signals, Active Directory reconnaissance (205 security checks across 15 categories including transitive Tier-0 attack-path analysis, NTLM-... More info

PowerTriage Windows CE is a native PowerShell triage script designed for Incident Response (DFIR) and forensic triage on compromised Windows systems. It focuses on practical live response, low deployment friction, and dependency-free artifact collection in the Community Edition. Community Edition highlights: - Native PowerShell: Runs on standard P... More info

A comprehensive PowerShell toolkit for threat hunting, digital forensics, and incident response (DFIR). Provides "Hunt" functions to detect persistence mechanisms, analyze system artifacts, search event logs, and generate detailed forensic reports.

Deterministic local log scrubber that builds token maps, scrubs logs, reports failed files, and supports safe release workflows.