A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
- threat
- hunt
- red
- blue
Repository Index
47,133 repositories indexed
1–3 of 3 · Most stars
Invoke-LiveResponse
- ir
- dfir
- winrm
- liveresponse
WELA (Windows Event Log Analyzer, ゑ羅) is a tool for auditing and configuring Windows event log settings. Windows event logs are a vital source of information for Digital Forensics and Incident Response (DFIR), providing visibility into system activity and security events.