PSInspect Incident Response Tool

Hello!  We wanted to share some background on 'PSInspect', a useful open source Incident Response (IR) tool that we maintain at Hoplite. PSInspect is a pre-imaging, first-response tool for suspect/compromised Windows (Vista/Server 2013 and later) systems, that quickly gathers hundreds of often fleeting pieces of OS and filesystem metadata. PSInspect is written in PowerShell with no external dependencies, making it a perfect tool for IT, InfoSec and DFIR professionals to keep in their go-bags and toolkits. PSInspect can be run locally or over a network and produces a comprehensive single-file report that is easy to share and to leverage for incident reporting and investigations. PSInspect is being used in Banking/Finance, Education, Healthcare and Fortune 1000 environments. Feel free to take a moment to check it out and make it part of your toolkit today: https://github.com/hl-repos/PSInspect PSInspect is one of several Hoplite IR tools, in the near future we'll share some information on 'LiveIR', the cloud-based big brother to PSInspect.