Commit Graph

3 Commits

Author SHA1 Message Date
0f15779472 Add Jump Lists collection (Get-JumpLists.ps1)
Collect Jump List artifacts showing recent files per application.
Includes smart app detection via content scanning, LNK file
enumeration with target extraction, and both automatic/custom
destinations. Supports -ShowAll and -MaxPerApp parameters.

Mark Jump Lists complete in TODO.md.
2026-02-03 21:57:10 +01:00
dcebc0f4fa Add SSH artifacts collection (Get-SSHArtifacts.ps1)
Collect SSH forensic data: known hosts with counts, SSH config,
keys, authorized_keys, PuTTY sessions, and server logs.

Update TODO.md with completed scripts.
2026-02-03 21:48:51 +01:00
878d19f917 Add Windows forensic artifact collection toolkit
Add PowerShell scripts for collecting forensic artifacts:
- USB/storage devices, mounted drives, portable devices
- Network history and hotspot connections
- Recent documents (OpenSavePidlMRU with PIDL parsing)
- System info and user enumeration with multiple output modes

Includes TODO.md for planned artifacts and updated README.
2026-02-03 21:31:39 +01:00