Skip to content
PowerForensics provides an all in one platform for live disk forensic analysis
C# PowerShell Batchfile
Branch: master
Clone or download

Latest commit

Latest commit 3593997 Apr 20, 2018

Files

Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
Images
Modules/PowerForensics Fixing CI test Apr 20, 2018
docs
lib
src
.gitignore
LICENSE.md Added instructions for joining our slack channel Dec 2, 2016
PowerForensics.sln
README.md Fix README.md formatting Apr 20, 2018
appveyor.yml
mkdocs.yml Added FAT file system support! Dec 29, 2016

README.md

PowerForensics - PowerShell Digital Forensics

Developed by @jaredcatkinson

Build status docs status waffle ready waffle in progress

Overview

The purpose of PowerForensics is to provide an all inclusive framework for hard drive forensic analysis. PowerForensics currently supports NTFS and FAT file systems, and work has begun on Extended File System and HFS+ support.

All PowerForensics documentation has been moved to Read The Docs.

Detailed instructions for installing PowerForensics can be found here.

Public API

PowerForensics is built on a C# Class Library (Assembly) that provides a public API for forensic tasks. The public API provides a modular framework for adding to the capabilities exposed by the PowerForensics module. All of this module's cmdlets are built on this public API and tasks can easily be expanded upon to create new cmdlets. API documentation can be found here.

You can’t perform that action at this time.