mnerv 878d19f917 Add Windows forensic artifact collection toolkit ...

Add PowerShell scripts for collecting forensic artifacts:
- USB/storage devices, mounted drives, portable devices
- Network history and hotspot connections
- Recent documents (OpenSavePidlMRU with PIDL parsing)
- System info and user enumeration with multiple output modes

Includes TODO.md for planned artifacts and updated README.

2026-02-03 21:31:39 +01:00

7.4 KiB

Raw Blame History

View Raw