mnerv ed0c1983b3 Add startup and persistence analysis tools ...

Add Get-AutoRun.ps1, Get-ScheduledTasks.ps1, and Get-Services.ps1
for analyzing auto-start programs and persistence mechanisms.

Get-AutoRun: Run/RunOnce keys, Startup folders, startup tasks
Get-ScheduledTasks: Detailed task analysis with filters
Get-Services: Service enumeration using WMI/CIM

Uses Get-CimInstance for reliable service enumeration, avoiding
Get-Service permission issues. Multiple filters and output modes.

Update TODO.md.

2026-02-03 22:39:35 +01:00

..

Get-AutoRun.ps1

Add startup and persistence analysis tools

2026-02-03 22:39:35 +01:00

Get-HotspotConnections.ps1

Add Windows forensic artifact collection toolkit

2026-02-03 21:31:39 +01:00

Get-Info.ps1

Add Windows forensic artifact collection toolkit

2026-02-03 21:31:39 +01:00

Get-JumpLists.ps1

Add Jump Lists collection (Get-JumpLists.ps1)

2026-02-03 21:57:10 +01:00

Get-MountedDevices.ps1

Add Windows forensic artifact collection toolkit

2026-02-03 21:31:39 +01:00

Get-NetworkHistory.ps1

Add Windows forensic artifact collection toolkit

2026-02-03 21:31:39 +01:00

Get-PortableDevices.ps1

Add Windows forensic artifact collection toolkit

2026-02-03 21:31:39 +01:00

Get-RecentDocs.ps1

Add Windows forensic artifact collection toolkit

2026-02-03 21:31:39 +01:00

Get-ScheduledTasks.ps1

Add startup and persistence analysis tools

2026-02-03 22:39:35 +01:00

Get-SearchHistory.ps1

feat: Add search history extraction (Get-SearchHistory.ps1)

2026-02-03 22:32:43 +01:00

Get-Services.ps1

Add startup and persistence analysis tools

2026-02-03 22:39:35 +01:00

Get-SSHArtifacts.ps1

Add SSH artifacts collection (Get-SSHArtifacts.ps1)

2026-02-03 21:48:51 +01:00

Get-TypedURLs.ps1

Add typed URLs extraction with multi-profile support

2026-02-03 22:25:56 +01:00

Get-USBDevices.ps1

Add Windows forensic artifact collection toolkit

2026-02-03 21:31:39 +01:00

Get-USBForensics.ps1

Add Windows forensic artifact collection toolkit

2026-02-03 21:31:39 +01:00

Get-USBStorage.ps1

Add Windows forensic artifact collection toolkit

2026-02-03 21:31:39 +01:00

Get-Users.ps1

Add Windows forensic artifact collection toolkit

2026-02-03 21:31:39 +01:00

winfetch.ps1

winfetch: add more color display

2026-02-03 22:10:45 +01:00