Get-Hashes is a PowerShell script created during Dakota State University’s CSC-842 Rapid Tool Development course that allows to acquire hashes from remote systems recursively from a examiner-defined starting location across a number of machines. Unique hashes could be taken from this tool and uploaded to VirusTotal.
Check GitHub for source code and more info.
Here is a video demo:
DISCLAIMER: THIS POST IS FOR INFORMATIONAL PURPOSES ONLY AND IS NOT TO BE CONSIDERED LEGAL ADVICE ON ANY SUBJECT MATTER. DIGITAL FORENSICS CORP. IS NOT A LAWFIRM AND DOES NOT PROVIDE LEGAL ADVICE OR SERVICES. By viewing posts, the reader understands there is no attorney-client relationship, the post should not be used as a substitute for legal advice from a licensed professional attorney, and readers are urged to consult their own legal counsel on any specific legal questions concerning a specific situation.
Comments are closed.