forensic-artifact-automation
A collection of powershell scripts that are designed to be ran from a Microsoft Defender for Endpoint Live Response terminal, utilizing open-source tools, such as Kape (Kroll Artifact Parser and Extractor), to forensically acquire and process necessary artifact used in compromise assessments. Additional scripts provide pre-processing automation capabilities and other supporting functions.
APACHE-2.0 License
Stars
11
Issue Statistics
Past Year
All Time
Total Pull Requests
0
0
Merged Pull Requests
0
0
Total Issues
0
5
Time to Close Issues
N/A
N/A