hackshelf

All tools / Incident response

PSRecon

Open gfoss/PSRecon on GitHub

Repository description, written by its owner:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.

Inactive last commit 3369 days ago

Commits in 0 of the last 52 weeks

Category
Incident response
Subcategory
Windows Evidence Collection
License
Apache-2.0
Latest release
None published
Stars
494
GitHub repository id
40107037
Listed in
awesome-incident-response (Apache-2.0)
Last checked
Oct 19, 2026

Security advisories

The maintainers have not published any security advisories on GitHub. Vulnerabilities reported only elsewhere, for example in the NVD, are not included.

Changes seen by hackshelf

  • Oct 19, 2026 First checked, status Inactive

Other tools in Windows Evidence Collection