From 370ce39996c8a21e0ad2dabf0803f643e68e4f51 Mon Sep 17 00:00:00 2001 From: Herman Slatman Date: Fri, 20 Nov 2015 14:43:08 +0100 Subject: [PATCH] PSRecon by LogRhythm PowerShell Tool --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index d6d11a2..12ae7f6 100644 --- a/README.md +++ b/README.md @@ -62,6 +62,8 @@ A curated list of tools and resources for security incident response, aimed to h * [Hindsight](https://github.com/obsidianforensics/hindsight) - Internet history forensics for Google Chrome/Chromium * [FECT](https://github.com/jipegit/FECT) - Fast Evidence Collector Toolkit (FECT) is a light incident response toolkit to collect evidences on a suspicious Windows computer. Basically it is intended to be used by non-tech savvy people working with a journeyman Incident Handler. * [Kansa](https://github.com/davehull/Kansa/) - Kansa is a modular incident response framework in Powershell. +* [PSRecon](https://github.com/gfoss/PSRecon/) - PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally. + ### Videos