Merge aa549d47880aa68756ceea528687e71f13588bc7 into 80d830402a9803288bb7137e522d25163b2c6a8e

This commit is contained in:
Furkan ÇALIŞKAN 2020-10-28 13:12:20 +01:00 committed by GitHub
commit 9885f8571f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -261,3 +261,4 @@ Digital Forensics and Incident Response (DFIR) teams are groups of people in an
* [PSRecon](https://github.com/gfoss/PSRecon/) - PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.
* [RegRipper](https://code.google.com/p/regripper/wiki/RegRipper) - Open source tool, written in Perl, for extracting/parsing information (keys, values, data) from the Registry and presenting it for analysis.
* [TRIAGE-IR](https://code.google.com/p/triage-ir/) - IR collector for Windows.
* [DFIRTriage](https://github.com/travisfoley/dfirtriage/) - DFIRTriage for Windows.