Windows Forensics: Understand Analysis Techniques for Your Windows

© Chuck Easttom, William Butler, Jessica Phelan, Ramya Sai Bhagavatula, Sean Steuber, Karely Rodriguez, Victoria Indy Balkissoon, Zehra Naseer 2024

C. Easttom et al.Windows Forensicshttps://doi.org/10.1007/979-8-8688-0193-8_9

9. PowerShell Forensics

Sean Steuber

Chuck Easttom, Ph.D., D.Sc.

Chuck Easttom¹  , William Butler², Jessica Phelan³, Ramya Sai Bhagavatula⁴, Sean Steuber⁵, Karely Rodriguez⁶, Victoria Indy Balkissoon⁷ and Zehra Naseer⁸

(1)

Plano, TX, USA

(2)

Maryland, MD, USA

(3)

Austin, TX, USA

(4)

Houston, TX, USA

(5)

Kansas City, MO, USA

(6)

Bonney Lake, WA, USA

(7)

Lake Mary, FL, USA

(8)

Eastvale, CA, USA

 

Introduction

PowerShell can be a very powerful forensics tool. Once ubiquitous with Windows, PowerShell is no longer beholden to one brand of operating ...