A Digital Forensics framework for Windows PowerShell.

Tooling to assist in Azure AD incident response

A Digital Forensics framework for Windows PowerShell.

A Digital Forensics framework for Windows PowerShell.

The module allows a fast and easy way to contain and remediate a threat on a remote host.

PowerGRR is an API client library in PowerShell working on Windows, Linux and macOS for GRR automation and scripting.

A comprehensive PowerShell toolkit for threat hunting, digital forensics, and incident response (DFIR). Provides "Hunt" functions to detect persistence mechanisms, analyze system artifacts, search event logs, and generate detailed forensic reports.

PowerTriage is a lightweight, dependency-free PowerShell script designed for Incident Response (DFIR) on compromised Windows devices. It collects critical artifacts (Network, Process, Persistence, System, Browsers) and packages them for analysis. Features: - Zero Dependencies: Runs on standard PowerShell 5.1+ - Modular: Full or Minimal collection ... More info