Live Response Using PowerShell

Live response is a critical area within Incident Response. While there are many tools and processes available to collect valuable information for later analysis, there haven't been any comprehensive studies done with the capabilities of PowerShell as an inbuilt tool to aid live response. This paper...

By

Sajeev Nair

August 19, 2013

All papers are copyrighted. No re-posting of papers is permitted

Related Content

DFIR - Blog - Reflections on the US Government’s OIG Report_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

December 11, 2024

Reflections on the US Government’s OIG Report on CISA’s Automated Indicator Sharing Program

The memorandum outlined findings and recommendations for improving perceived deficiencies with one of its information sharing programs.

Security Awareness, Artificial Intelligence (AI), Digital Forensics, Incident Response & Threat Hunting, Cloud Security, Cyber Defense, Offensive Operations, Pen Testing, and Red Teaming, Industrial Control Systems Security, Open-Source Intelligence (OSINT)

December 10, 2024

Top SANS Summit Talks of 2024

This year, SANS hosted 13 Summits from OSINT, ICS, Ransomware, DFIR to HackFest. Here were the top-rated talks of the year.

DFIR - Blog - SOF-ELK's Evolution- A Comprehensive Update for Enhanced Digital Forensics_340 x 340(1).jpg

Digital Forensics, Incident Response & Threat Hunting

December 3, 2024

SOF-ELK®'s Evolution: A Comprehensive Update for Enhanced Digital Forensics

SOF-ELK is a free, open source bootable VM preconfigured with a custom Elastic Stack implementation tailored to security and investigative workflows.

Phil Hagen