Invoke-IR
Friday, May 1, 2015

On the Forensic Trail - Master Boot Record (MBR)

›
[This is the 2nd in a multi-part series titled "On the Forensic Trail".  My goal with this series is to introduce my PowerS...
15 comments:
Friday, April 24, 2015

On the Forensic Trail - Preparing for our Journey

›
About a month ago, I posted about a PowerShell module I wrote called PowerForensics.  At the time, the module was nothing more than a proo...
6 comments:
Saturday, March 7, 2015

Parse the MFT in PowerShell

›
[This post has been deprecated.  During the development of PowerForensics, I have decided to move away from the Sleuth Kit naming conventio...
‹
›
Home
View web version
Powered by Blogger.