Invoke-LiveResponse
A PowerShell module for responders collecting forensic artifacts from Windows systems over WinRM or through local script execution.
Invoke-LiveResponse is a Powershell module I put together to enable raw disk collections over WinRM and local script execution. Leveraging Powerforensics via a custom Powershell function it enabled collections of key forensic artefacts and stdout of script results typical for live response tasks.
