ANSSI-FR/DFIR4vSphere

This is stars and forks stats for /ANSSI-FR/DFIR4vSphere repository. As of 06 May, 2024 this repository has 116 stars and 16 forks.

Table of contents: Module description Installation and pre-requisites Start-VC_Investigation data collection Start-ESXi_Investigation data collection Files generated Log analysis with Splunk When threat actors encrypts the vCenter Module description: The DFIR4vSphere PowerShell module collects logs and forensics artefacts on both ESXi hosts and the vCenter console. The module has two main functions: Start-VC_Investigation: This function will collect all vSphere API calls registered on the vCenter,...