Have received many questions offline on the use of PowerShell and how we can get the desired artifacts from Windows system. While I have responded to most of those, I haven't gotten opportunity to update them here. I will try and update them here in a series of posts in the coming days.
The commands and options I will be posting are to be used in addition to the already published commands in the LRUP code and the SANS paper.
LRUP code is available here.
The commands and options I will be posting are to be used in addition to the already published commands in the LRUP code and the SANS paper.
LRUP code is available here.
No comments:
Post a Comment