Doug Metz (@dwmetz)
github

dwmetz

Twitter logo Share LinkedIn logo Share Facebook logo Share
  • Stars
    star
    404
  • Global Rank 69,635 (Top 3 %)
  • Followers 107
  • Following 18
  • Registered over 5 years ago
  • Most used languages
    PowerShell
         87.5 %
    HTML
         12.5 %

Top repositories

1

CyberPipe

An easy to use PowerShell script to collect memory and disk forensics for DFIR investigations.
PowerShell
265
star
2

QuickPcap

A quick and easy PowerShell script to collect a packet trace with option to convert .etl to .pcap.
PowerShell
40
star
3

PSHero

PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.
PowerShell
35
star
4

detonaRE

Capture. Detonate. Collect
PowerShell
14
star
5

Mal-Hash

This script will generate hashes (MD5, SHA1, SHA256), submit the MD5 to Virus Total, and produce a text file with the results.
PowerShell
14
star
6

Axiom-PowerShell

PowerShell scripts to aid investigators when utilizing O365 and Magnet Axiom.
PowerShell
10
star
7

Ginsu

Takes a larger image and 'chops' it down to <= 3GB zips to traverse Windows Defender for Endpoint
PowerShell
5
star
8

Presentations

Archive of presentations shared with the DFIR community.
5
star
9

SIFT-WSL

Resources for running SIFT Worstation in Windows Subsystem for Linux (WSL)
3
star
10

dwmetz.github.io

HTML
1
star