cyberstars
cyberstars / tools / powerforensics

PowerForensics

Live PowerShell disk forensics.

PowerShell framework for forensic analysis of live disks: file system metadata, deleted files, USN journal, MFT and registry.