PowerShell Forensics and OSINT

PowerShell scripts for Windows 10 and 11 machines. Most scripts output results to a formatted text file.
Some scripts for Win10/11 hardening.

Name		Name	Last commit message	Last commit date
Latest commit History 36 Commits
DFIR-Script.ps1		DFIR-Script.ps1
FailedUsers.ps1		FailedUsers.ps1
LICENSE		LICENSE
NATOSINT.sh		NATOSINT.sh
PracticalWindowsForensics-cheat-sheet.pdf		PracticalWindowsForensics-cheat-sheet.pdf
README.md		README.md
WinDiskClean.ps1		WinDiskClean.ps1
arp.ps1		arp.ps1
backdoor.ps1		backdoor.ps1
bannedip.ps1		bannedip.ps1
bannedip.txt		bannedip.txt
bkdoor.ps1		bkdoor.ps1
cleanup.ps1		cleanup.ps1
cleanup.sh		cleanup.sh
configerrors.ps1		configerrors.ps1
foren.ps1		foren.ps1
forenps.ps1		forenps.ps1
hunter.py		hunter.py
incidentresp.ps1		incidentresp.ps1
infops.ps1		infops.ps1
inven.ps1		inven.ps1
logrotate.ps1		logrotate.ps1
looklog.ps1		looklog.ps1
namesearch.sh		namesearch.sh
nc1.11.zip		nc1.11.zip
netmap.ps1		netmap.ps1
netscan.ps1		netscan.ps1
networkinfo.ps1		networkinfo.ps1
networkpowershell.ps1		networkpowershell.ps1
phish.py		phish.py
psharden.ps1		psharden.ps1
quickscan.ps1		quickscan.ps1
rootk.ps1		rootk.ps1
routercheck.ps1		routercheck.ps1
runall.ps1		runall.ps1
rundefender.ps1		rundefender.ps1
secreport.ps1		secreport.ps1
suspicous.ps1		suspicous.ps1
untrustPSG.ps1		untrustPSG.ps1
userdev48.ps1		userdev48.ps1
users12.ps1		users12.ps1
win10hard.ps1		win10hard.ps1
winrootkit.ps1		winrootkit.ps1

Provide feedback