PowerForensics is a PowerShell digital forensics framework developed by Jared Atkinson.It currently supports NTFS, but EXT4 file system support is going to be added soon.
You can download the toolkit here and use this article to install it.
Also we highly recommend to check these amazing posters at Jared’s website.
DISCLAIMER: THIS POST IS FOR INFORMATIONAL PURPOSES ONLY AND IS NOT TO BE CONSIDERED LEGAL ADVICE ON ANY SUBJECT MATTER. DIGITAL FORENSICS CORP. IS NOT A LAWFIRM AND DOES NOT PROVIDE LEGAL ADVICE OR SERVICES. By viewing posts, the reader understands there is no attorney-client relationship, the post should not be used as a substitute for legal advice from a licensed professional attorney, and readers are urged to consult their own legal counsel on any specific legal questions concerning a specific situation.
