Matthew Green

I am a DFIR and detection guy from Sydney Australia.

Invoke-LiveResponse


Invoke-LiveResponse is a Powershell module I put together to enable raw disk collections over WinRM and local script execution. Leveraging Powerforensics via a custom Powershell function it enabled collections of key forensic artefacts and stdout of script results typical for live response tasks.

See Invoke-LiveResponse on Github
Invoke-LiveResponse