The purpose of PowerForensics is to provide an all inclusive framework for hard drive forensic analysis. PowerForensics currently supports NTFS and FAT file systems, and work has begun on Extended File System and HFS+ support. All PowerForensics documentation has been moved to Read The Docs. Detailed instructions for installing PowerForensics can be found here. Public API PowerForensics …
Continue reading “PowerForensics – PowerShell Digital Forensics”