Welcome to the PowerShell-Scripts-and-Commands-for-Investigation repository! This project provides a comprehensive collection of PowerShell commands and scripts designed for threat hunting, forensic investigation, and security analysis.
- System investigation scripts
- Persistence & startup analysis
- Event log and security analysis
- Network investigation tools
- Forensic analysis techniques
- Sysmon & threat hunting queries
- Log exporting for SIEM solutions (e.g., Splunk)
Clone the repository using:
git clone https://github.com/SaranCoder0/PowerShell-Scripts-and-Commands-for-Investigation.git
Run PowerShell scripts directly from the command line:
powershell -ExecutionPolicy Bypass -File script.ps1
We welcome contributions! Feel free to submit pull requests, report issues, or suggest improvements.