© Chet Hosmer 2019
Chet HosmerPowerShell and Python Togetherhttps://doi.org/10.1007/978-1-4842-4504-0_1

1. An Introduction to PowerShell for Investigators

Chet Hosmer1 
(1)
Longs, SC, USA
 

PowerShell provides a great acquistion engine for obtaining a vast array of information from live systems, servers, peripherals, mobile devices, and data-driven applications like Active Directory.

Because of Microsoft’s decision to open PowerShell and provide the ability to acquire information from other non-Microsoft platforms such as Mac and Linux, the breadth of information that can be accessed is virtually limitless (with the proper credentials). Combine that with a plethora of built-in and third-party CmdLets (pronounced “command let”) that can be filtered, sorted, ...

Get PowerShell and Python Together: Targeting Digital Investigations now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.