
ForensicMiner
A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.
digital-forensicsdisk-forensicsforensics+2

A really good DFIR automation for collecting and analyzing evidence designed for cybersecurity professionals.

PowerShell-based incident response toolkit that collects 25+ forensic artifacts (processes, network connections, registry, browser history) and…

An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.

PowerShell toolkit that extracts locked Windows files (SAM, SYSTEM, NTDS, ...) using MFT parsing and raw disk reads