Edited version of Lee Christensen's Get-NetworkConnection which includes timestamp for each network connection

An Incident Response tool that visualizes historic process execution evidence (based on Event ID 4688 - Process Creation Event) in a tree view.

An Incident Response tool to extract console command history and screen output buffer

This project is designed to create deceptive webpages to deceive and redirect attackers away from real websites.