Invoke-IR PowerForensics issues

Invoke-IR / PowerForensics

PowerForensics provides an all in one platform for live disk forensic analysis

MIT License

1.38k stars 274 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

MasterBootRecord Class BootCode Property

#120 jaredcatkinson opened 8 years ago
0
not apply to EFI System

#119 horse9153 closed 8 years ago
2
Add ability to reference volumes from raw disk access

#118 jaredcatkinson opened 8 years ago
0
ValueKey.GetData() return formatted data

#117 jaredcatkinson opened 8 years ago
0
Finish OutlookCatalog class and cmldet

#116 jaredcatkinson closed 8 years ago
0
Update all NTUSER.DAT objects to include the User

#115 jaredcatkinson opened 8 years ago
0
Add Mount Method to MBR and GPT Partitions

#114 jaredcatkinson opened 8 years ago
0
Add hivecheck method to RegistryHelper

#113 jaredcatkinson closed 8 years ago
0
Add Get-ForensicOfficePlaceMRU cmdlet

#112 jaredcatkinson opened 8 years ago
0
Add Get-ForensicOfficeFileMRU cmdlet

#111 jaredcatkinson opened 8 years ago
0
Add Get-ForensicOfficeTrustRecord cmdlet

#110 jaredcatkinson opened 8 years ago
0
Manual, videos or usage examples?

#109 lgcambero closed 8 years ago
2
Add db support to Registry Parser

#108 jaredcatkinson closed 8 years ago
0
Add support for MountPoints and MountPoints2

#107 jaredcatkinson opened 8 years ago
0
Add support for RecentDocs Key

#106 jaredcatkinson opened 8 years ago
0
Add cmdlet for RunMRU

#105 jaredcatkinson closed 8 years ago
0
ShellBag Support

#104 jaredcatkinson opened 8 years ago
0
Get-ForensicRegistryKey: Source array was not long enough

#103 nremezov opened 8 years ago
8
Get-ForensicNetworkList returns "Source array was not long enough"

#102 nremezov opened 8 years ago
4
Get-ForensicAmcache returns error

#101 nremezov opened 8 years ago
5
Get-ForensicRegistryKey errors if trailing \ is present

#100 jaredcatkinson closed 8 years ago
1
Add help for Get-ForensicExplorerTypedPath

#99 jaredcatkinson closed 8 years ago
0
Add help for Get-ForensicWindowsSearchHistory

#98 jaredcatkinson closed 8 years ago
1
NTUSER.DAT hives are not check

#97 jaredcatkinson closed 8 years ago
1
Get-RegistryKey does not show base

#96 jaredcatkinson closed 8 years ago
1
Get-ForensicNetworkList is not Windows XP compatible

#95 jaredcatkinson opened 8 years ago
0
Get-NetworkList -VolumeName needed

#94 jaredcatkinson closed 8 years ago
0
Removed the old *Raw cmdlets

#93 leechristensen closed 8 years ago
1
NamedKey Get Method redundant name

#92 jaredcatkinson opened 8 years ago
0
BinShred should support padded elements

#91 LeeHolmes closed 8 years ago
1
UsnJrnl GetTestInstances Method is returning duplicate objects

#90 jaredcatkinson closed 7 years ago
0
Get-ForensicPrefetch ValueFromPipelineByPropertyName

#89 jaredcatkinson closed 8 years ago
0
Question: Get-ForensicBootSection -Path parameter values (and error message)

#88 juneb closed 8 years ago
5
Format-ForensicHex is not present in 1.0.1.0

#87 juneb closed 8 years ago
3
New: Invoke-ForensicBinShred; Rewrite: Invoke-ForensicTimeline; Add F…

#86 juneb closed 8 years ago
1
Add errors to Registry Classes

#85 jaredcatkinson closed 8 years ago
1
Amcache Windows 10

#84 jaredcatkinson closed 8 years ago
1
Invoke-ForensicTimeline does not run in background

#83 juneb opened 8 years ago
3
Cmdlets require Unix-style volume format

#82 juneb closed 8 years ago
6
Use standard error messages

#81 juneb opened 8 years ago
3
Invoke-ForensicDD -Offset is mandatory

#80 juneb closed 8 years ago
3
Rename Invoke-ForensicBinShred to ConvertFrom-BinaryData (leaving 'BinShred' alias)

#79 juneb closed 8 years ago
6
Prefetch Windows 10

#78 jaredcatkinson opened 8 years ago
1
Invoke-ForensicBinShred should support byte arrays

#77 mattifestation closed 8 years ago
1
Add documentation for Invoke-ForensicBinShred in the wiki

#76 mattifestation closed 8 years ago
1
Extended Partition Support

#75 jaredcatkinson closed 8 years ago
0
Add "Utc" to DateTime properties

#74 jaredcatkinson opened 8 years ago
2
VolumeName is mandatory on Get-ContentRaw

#73 jaredcatkinson closed 8 years ago
0
Master Boot Record - Extended Partitions

#72 jaredcatkinson closed 8 years ago
0
Pester Test Update

#71 jaredcatkinson opened 8 years ago
0

Previous Next