Windows PowerShell and Command Prompt as Investigative Tools

No ratings

Presented at TechnoSecurity&DigitalForensics 2019 by

Jeff Shackelford

In this session, attendees will learn how to harness the power of PowerShell and the Command Prompt for basic investigative purposes, along with a brief introduction on "PowerShell Core", which is an open-source, multi-platform version that can operate on Windows, Mac and Linux operating systems. Attendees will learn how they can create and add custom PowerShell and CMD commands to existing commercial solutions and will also receive a free "Quick Start" field guide to using PowerShell and CMD commands in live analysis situations.