PSRecon
A PowerShell-based incident response and live forensic data acquisition tool for Windows hosts.
PSRecon
A PowerShell-based incident response and live forensic data acquisition tool for Windows hosts.
PSRecon Description
PSRecon is a PowerShell-based incident response and live forensic data acquisition tool that gathers data from a remote Windows host, organizes the data into folders, hashes all extracted data, and sends the data to the security team. It also includes endpoint lockdown functionality, allowing users to disable an active directory account or quarantine the host until IT/Security can respond. The tool provides a detailed report that is self-contained, making it easy to share. It can be integrated with the organization's Active Defense frameworks to automate rapid forensic data acquisition and lock down the endpoint. PSRecon can be run on local or remote hosts, and offers various options for enabling PSRemoting and Unrestricted PowerShell Execution.
PSRecon FAQ
Common questions about PSRecon including features, pricing, alternatives, and user reviews.
PSRecon is A PowerShell-based incident response and live forensic data acquisition tool for Windows hosts.. It is a Security Operations solution designed to help security teams with Evidence Collection, Memory Forensics.
ALTERNATIVES
A library and set of tools for accessing and analyzing storage media devices and partitions for forensic analysis and investigation.
A digital forensics tool that provides read-only access to file-system objects from various storage media types and file formats.
Request Tracker for Incident Response (RTIR) is a tool for incident response teams to manage incident reports, correlate data, and facilitate communication.
Autopsy is a GUI-based digital forensics platform for analyzing hard drives and smart phones, with a plug-in architecture for custom modules.
POPULAR
TRENDING CATEGORIES
Stay Updated with Mandos Brief
Get strategic cybersecurity insights in your inbox