PowerForensics
PowerForensics is a PowerShell digital forensics framework for hard drive forensic analysis.
PowerForensics is a PowerShell digital forensics framework for hard drive forensic analysis.
Checked October 2026.
PowerForensics is a PowerShell digital forensics framework for hard drive forensic analysis, supporting NTFS and FAT file systems, with plans for HFS+ and Extended File System support.
It provides a public API for forensic tasks, built on a C# Class Library, allowing for modular expansion of capabilities.
Documentation and installation instructions can be found on Read The Docs and GitHub.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about PowerForensics: features, pricing and alternatives.
PowerForensics is a product in the Digital Forensics category. It covers Evidence Collection and Memory Forensics.
PowerForensics is free. Download and setup instructions are at https://github.com/Invoke-IR/PowerForensics/.
Alternatives to PowerForensics listed on CybersecTools:
Compare all PowerForensics alternatives at https://cybersectools.com/alternatives/powerforensics
PowerForensics is available as on-premises software. It is listed for mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
A Python-based engine for automatic creation of timelines in digital forensic analysis
A tool to verify the integrity of PNG, JNG, and MNG files and extract detailed information about the image.
Normalize, index, enrich, and visualize network capture data using Potiron.
A command-line tool that parses Google Protobuf encoded data without schema definitions and displays the content in a readable, colored format.
A PowerShell-based incident response and live forensic data acquisition tool for Windows hosts.
A pure Python parser for Windows Event Log (.evtx) files that enables cross-platform forensic analysis of Windows system events.
On our shortlist?
No shortlist covers this product's category yet. The closest is Best MDR Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI
