Incident Response¶
| Tool | Source | Description | Tags | File Extensions | Profiles |
|---|---|---|---|---|---|
| Incident-Response-Powershell | Git | PowerShell Digital Forensics & Incident Response Scripts. | incident-response, powershell | ||
| Witr | GitHub Release | Why is this running? | forensics, triage | ||
| forensic-timeliner | GitHub Release | A high-speed forensic timeline engine for Windows forensic artifact CSV output built for DFIR investigators. Quickly consolidate CSV output from processed triage evidence for Eric Zimmerman (EZ Tools) Kape, Axiom, Hayabusa, Chainsaw and Nirsoft into a unified timeline. | forensics, timeline | .evtx, .csv, .json |
Full only |