A Digital Forensics framework for Windows PowerShell.

Tooling to assist in Azure AD incident response

A Digital Forensics framework for Windows PowerShell.

A Digital Forensics framework for Windows PowerShell.

The module allows a fast and easy way to contain and remediate a threat on a remote host.

PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.

PowerTriage is a lightweight, dependency-free PowerShell script designed for Incident Response (DFIR) on compromised Windows devices. It collects critical artifacts (Network, Process, Persistence, System, Browsers) and packages them for analysis. Features: - Zero Dependencies: Runs on standard PowerShell 5.1+ - Modular: Full or Minimal collection ... More info

A comprehensive PowerShell toolkit for threat hunting, digital forensics, and incident response (DFIR). Provides "Hunt" functions to detect persistence mechanisms, analyze system artifacts, search event logs, and generate detailed forensic reports.