Bert-JanP/Incident-Response-Powershell

Forensics artefact collection tool for systems running Microsoft Windows

Rapidly Search and Hunt through Windows Forensic Artefacts

MemProcFS-Analyzer - Automated Forensic Analysis of Windows Memory Dumps for DFIR

Cross-platform incident response and live forensics toolkit with built-in detection, structured analysis, and report generation — designed for fast, actionable security investigations.

You didn't think I'd go and leave the blue team out, right?

UAC is a powerful and extensible incident response tool designed for forensic investigators, security analysts, and IT professionals. It automates the collection of artifacts from a wide range of Unix-like systems, including AIX, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD and Solaris.

Some usefull Scripts and Executables for Pentest & Forensics

Dumping DPAPI credz remotely

GRR Rapid Response: remote live forensics for incident response