Invoke-IR PowerForensics issues

Invoke-IR / PowerForensics

PowerForensics provides an all in one platform for live disk forensic analysis

MIT License

1.39k stars 274 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Trojan Detected in Repository

#172 glocker543 opened 2 months ago
0
Fix incorrect alt data stream command

#171 asheroto opened 1 year ago
0
Fix spelling in docs

#170 asheroto opened 1 year ago
0
Get-ForensicAmcache returns an error

#169 Edelwy opened 1 year ago
3
`Get-ForensicFileRecord` broken by Windows 11?

#168 gabriellandau opened 2 years ago
0
Add buffering methods

#167 jpohls1 closed 2 years ago
1
Update Get-ForensicFileSlack.md doc

#164 Sim4n6 closed 3 years ago
0
Issues with Windows Server 2019

#163 DennisL68 opened 3 years ago
0
Add Feature Invoke-ForensicDD

#162 m4dm4n opened 4 years ago
0
Get-ForensicPrefetch needs to be updated to take in to account compressed pf files in Win10

#161 dmoore44 opened 4 years ago
0
Get-ForensicFileRecord : Destination array was not long enough.

#160 RoYoMi opened 5 years ago
0
PowerForensicsPortable Issue

#159 joe201745 opened 6 years ago
0
Volume Shadow Copies

#158 SamMaesschalck opened 6 years ago
1
Error when using any cmdlet

#157 beleka opened 6 years ago
0
Forensic Timeline Type

#156 beleka opened 6 years ago
0
Fix README.md formatting

#155 vors closed 6 years ago
1
Fixing CI tests

#154 vors closed 6 years ago
0
AmCache Parser Update

#153 jamdunnDFW opened 6 years ago
1
Powershell Gallery

#152 hackjammer opened 6 years ago
0
Get-ForensicFileRecord : Path not found

#151 trietptm opened 7 years ago
1
Get-ForensicFileRecord : Array dimensions exceeded supported range.

#150 AndresPae opened 7 years ago
5
Get-ForensicTimeline Amcache Error on Windows 7

#149 6a7067 opened 7 years ago
1
File mru

#148 barbyfernicola opened 7 years ago
2
AddSHA256:Adds support for .gethash("SHA256")

#147 davehull closed 7 years ago
0
Get-ForensicFileRecord throwing error

#146 colindix opened 7 years ago
5
Type [PowerForensic.Ntfs.FileRecord] not found

#145 secusoc opened 8 years ago
21
Create PowerforensicsInstall.ps1

#144 opexxx opened 8 years ago
0
PowerShell Remoting Usage

#143 mr-burnse opened 8 years ago
3
Copy-ForensicFile issue

#142 alexandreborges closed 8 years ago
9
Implement FSCTL_ENUM_USN_DATA

#141 tophf closed 8 years ago
7
Get-ForensicFileRecord's GetChild doesn't work

#140 tophf opened 8 years ago
1
Debug issue

#139 suminvr closed 8 years ago
3
[Get-ForensicFileRecord] -Deleted switch parameter

#138 jaredcatkinson opened 8 years ago
1
Generic Bitmap class/parsing method

#137 jaredcatkinson opened 8 years ago
0
Differentiate between RAM Slack and File Slack

#136 jaredcatkinson opened 8 years ago
2
Test-ForensicBadCluster

#135 jaredcatkinson opened 8 years ago
0
Get-ForensicVolumeSlack

#134 jaredcatkinson opened 8 years ago
0
Error on build

#133 JamesHabben closed 8 years ago
3
MBR GRUB BootCode Hash

#132 JamesHabben opened 8 years ago
0
Error parsing IndexAllocation for System32

#131 jaredcatkinson closed 8 years ago
1
Get-ForensicVolumeBootRecord should incorporate PowerForensics.FileSystems.VolumeBootRecord

#130 jaredcatkinson opened 8 years ago
0
Clean up VolumeBootRecord classes

#129 jaredcatkinson opened 8 years ago
0
Change IntPtr to SafeFileHandle

#128 jaredcatkinson closed 8 years ago
1
Update all readDrive dependent functions

#127 jaredcatkinson closed 8 years ago
0
GuidPartitionTableEntry Class doesn't interpret partition type

#126 jaredcatkinson closed 8 years ago
0
Add -DrivePath & -PartitionNumber parameters to volume based cmdlets

#125 jaredcatkinson opened 8 years ago
0
Remove as many GetSubArray method calls as possible

#124 jaredcatkinson closed 8 years ago
1
Push getVolumeName method calls to lower code

#123 jaredcatkinson closed 8 years ago
1
Add GetAttribute method to FileRecord class

#122 jaredcatkinson opened 8 years ago
0
VolumeBootRecord CodeSection property

#121 jaredcatkinson opened 8 years ago
0