PowerShell Digital Forensics & Incident Response Scripts.
-
Updated
May 26, 2026 - PowerShell
#
forensics-tools
Here are 17 public repositories matching this topic...
PowerShell script designed to help Incident Responders collect forensic evidence from local and remote Windows devices.
powershell incident-response forensics dfir evidence forensics-investigations incident-response-tooling forensics-tools
-
Updated
Aug 26, 2024 - PowerShell
Enterprise PowerShell & VBScript suite for Active Directory automation, ITSM-aligned provisioning, security hardening, and digital forensics - built for Windows Server and workstation environments by a Senior IAM Analyst with a focus on accuracy, scalability, and compliance.
active-directory sysadmin itsm workstations admin-tools blueteam active-directory-domain-services evtx-analisys sysadmin-tasks sysadmin-tool sysadmin-scripts eventlogs windows-server-2019 wsus-maintenance organizational-units ldap-authentication-backend forensics-tools activedirectoryapi itsm-solutions gpo-policy-security
-
Updated
Jun 19, 2026 - PowerShell
PowerShell-based utility for mapping byte offsets to source code using hex and ASCII context for detection research and red team tooling.
windows powershell incident-response reverse-engineering forensics hex-editor pentesting malware-analysis binary-analysis powershell-script offensive-security red-team security-tools redteam incident-response-tooling pe-analysis red-team-tools reverse-engineering-tools forensics-tools offset-analysis
-
Updated
Dec 31, 2025 - PowerShell
A tool for fetching DFIR and other GitHub tools.
-
Updated
Aug 2, 2025 - PowerShell
Over 100K open-source YARA signatures evaluated against over 280K files to give insights into the performance of each YARA rule.
-
Updated
Dec 13, 2022 - PowerShell
PowerShell tool that helps to parse and analyze Ivanti Secure Connect logs, this tool could help in forensic investigations to have more visibility and more detailed view of the "vc0" logs.
-
Updated
Jan 5, 2025 - PowerShell
Portable update manager for DFIR USB toolkits. Auto-updates 49+ forensic tools from GitHub with a WPF GUI, parallel checking, hash verification, forensic write protection, and silent/headless mode.
windows powershell wpf incident-response dfir cybersecurity digital-forensics forensics-tools usb-toolkit tool-updater
-
Updated
Mar 18, 2026 - PowerShell
Evidence Collection & Handling Orchestrator
-
Updated
Feb 11, 2026 - PowerShell
Install every tool and every needed software for your DFIR (/SRE/PEN/OSINT/TCI) workstation. This Tool is doing the work for you, everything after installing Windows (and update).
installer dfir malware-analysis windows-installer pentesting-tools tool-installer sre-tools forensics-tools offensive-tools malware-analysis-tools dfir-installer forensics-installer forensic-installer sre-installer pentesting-installer malware-analysis-installer
-
Updated
May 12, 2026 - PowerShell
Forensic browser history extractor for Windows — all users, all browsers, one report
-
Updated
Mar 24, 2026 - PowerShell
Windows artifact collector to facilitate forensic work
-
Updated
Jun 16, 2023 - PowerShell
PowerShell network scanner and asset inventory for SOC/IR teams — no installation, no dependencies, runs fully offline.
windows powershell incident-response nmap soc vulnerability-scanners network-scanner network-security blue-team forensics-tools asset-inventory
-
Updated
Mar 31, 2026 - PowerShell
Zero-dependency DFIR triage script for Windows systems. PowerShell 5.1, no external tools required.
windows ioc powershell incident-response forensics dfir soc triage threat-intelligence blue-team forensics-tools
-
Updated
Jun 2, 2026 - PowerShell
🖥️ PowerShell-based automated Windows forensic triage & live response tool for SOC analysts
-
Updated
Feb 20, 2026 - PowerShell
Scan Windows networks for assets and hosts offline with PowerShell for SOC and IR teams, no install, no dependencies
windows powershell incident-response nmap soc vulnerability-scanners network-scanner network-security blue-team forensics-tools asset-inventory
-
Updated
Jun 16, 2026 - PowerShell
DFIR-Orc GetThis tool configuration generator.
-
Updated
Jul 4, 2022 - PowerShell
Improve this page
Add a description, image, and links to the forensics-tools topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the forensics-tools topic, visit your repo's landing page and select "manage topics."