waydaws Goto Github PK

achoir

Windows Live Artifacts Acquisition Script

adtimeline

PowerShell script creating a timeline of Active Directory changes with replication metadata

arthir

ATT&CK Remote Threat Hunting Incident Response

forensics

Windows digital forensics and incident response scripts

free-programming-books

get-baseline

PowerShell Script for Agentless Incident Response

ir_scripts

incident response scripts

live-hostforensics

Basic Powershell script for live host forensics artifact collection

meerkat

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

posh-r2

PowerShell - Rapid Response... For the incident responder in you!

powershell

A series of scripts

projecttest

sessiongopher

SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY, FileZilla, and Microsoft Remote Desktop. It can be run remotely or locally.

threathunting

Powershell collection designed to assist in Threat Hunting Windows systems.

winfor

Powershell script to execute different forensic Powershell functions / tools on a compromised host