Acquire And Analyze Host Forensics

This playbook enables gathering forensic data from a host and analyzing the acquired data by using the relevant forensics automations.

Windows Forensics · 5 tasks · 1 input · 0 outputs

Inputs

  • Host — A single hostname or IP address from which to acquire the forensic data. For example, testpc01.

Flowchart

yes Start Start PS-Remote Acquire Host Forensics - PS-Remote Acquire Host Forensics PS-Remote Acquire Host Fo... PS-Remote Acquire Host Forensics Done Done Forensics Tools Analysis - Forensics Tools Analysis Forensics Tools Analysis Forensics Tools Analysis Was a hostname provided? Was a hostname provided?