n3l5/irMempull

This repository has been archived on 02/Jan/2024
Stars
19
Rank 1,163,249 (Top 23 %)
Language
PowerShell
Created about 11 years ago
Updated over 9 years ago

n3l5/irMempull

n3l5

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

PowerShell Memory Pulling script

irFARTpull

PowerShell script utilized to pull several forensic artifacts from a live Win7 and WinXP system without WINRM.

irCRpull

irCRpull is a PowerShell script utilized to pull several system artifacts, utilizing the free tool CrowdResponse, from a live Win7+ system on your network.

FARTprocess

Script to process the output from IRFartpull

netshPacketCap

Powershell script to launch a remote netsh packet trace and pull it for analysis.

unBUP

Powershell script to process McAfee Quarantine .bup files.

irMyzepull