Commit Graph

2 Commits

Author SHA1 Message Date
dcebc0f4fa Add SSH artifacts collection (Get-SSHArtifacts.ps1)
Collect SSH forensic data: known hosts with counts, SSH config,
keys, authorized_keys, PuTTY sessions, and server logs.

Update TODO.md with completed scripts.
2026-02-03 21:48:51 +01:00
878d19f917 Add Windows forensic artifact collection toolkit
Add PowerShell scripts for collecting forensic artifacts:
- USB/storage devices, mounted drives, portable devices
- Network history and hotspot connections
- Recent documents (OpenSavePidlMRU with PIDL parsing)
- System info and user enumeration with multiple output modes

Includes TODO.md for planned artifacts and updated README.
2026-02-03 21:31:39 +01:00