
ir-rescue
A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.
digital-forensicsdisk-forensicsforensics+6
488

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

Automates Windows memory forensics and DFIR workflows with MemProcFS: YARA/ClamAV scanning, process anomaly detection, and artifact/log extraction.

Cross-platform interactive shell for Microsoft Defender for Endpoint Live Response

An aggressor script that tracks operational changes made during a red team engagement. Gives you a full audit trail of what was changed and what…

7-Zip CVE-2022-29072 Mitigation - CHM file - This script detects if the .chm file exists and removes it.