A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
- threat
- hunt
- red
- blue
Repository Index
47,133 repositories indexed
1–4 of 4 · Most stars
Invoke-LiveResponse
- ir
- dfir
- winrm
- liveresponse
WELA (Windows Event Log Analyzer, ゑ羅) is a tool for auditing and configuring Windows event log settings. Windows event logs are a vital source of information for Digital Forensics and Incident Response (DFIR), providing visibility into system activity and security events.
A suite of command-line tools for working with PowerShell Arrays. From querying to doing array statistics.