dwmetz/detonaRE

Stars
14
Rank 1,438,076 (Top 29 %)
Language
PowerShell
License
MIT License
Created over 1 year ago
Updated about 1 year ago

dwmetz/detonaRE

dwmetz

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Capture. Detonate. Collect

CyberPipe

An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.

QuickPcap

A quick and easy PowerShell script to collect a packet trace with option to convert .etl to .pcap.

PSHero

PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.

Mal-Hash

This script will generate hashes (MD5, SHA1, SHA256), submit the MD5 to Virus Total, and produce a text file with the results.

Axiom-PowerShell

PowerShell scripts to aid investigators when utilizing O365 and Magnet Axiom.

Ginsu

Takes a larger image and 'chops' it down to <= 3GB zips to traverse Windows Defender for Endpoint

Presentations

Archive of presentations shared with the DFIR community.

SIFT-WSL

Resources for running SIFT Worstation in Windows Subsystem for Linux (WSL)

dwmetz.github.io