n3l5/unBUP

This repository has been archived on 02/Jan/2024
Stars
4
Rank 3,304,323 (Top 66 %)
Language
PowerShell
Created over 11 years ago
Updated about 10 years ago

n3l5/unBUP

n3l5

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Powershell script to process McAfee Quarantine .bup files.

irFARTpull

PowerShell script utilized to pull several forensic artifacts from a live Win7 and WinXP system without WINRM.

irMempull

PowerShell Memory Pulling script

irCRpull

irCRpull is a PowerShell script utilized to pull several system artifacts, utilizing the free tool CrowdResponse, from a live Win7+ system on your network.

FARTprocess

Script to process the output from IRFartpull

netshPacketCap

Powershell script to launch a remote netsh packet trace and pull it for analysis.

irMyzepull