This repository is a collection of PowerShell scripts designed to assist in orchestrating actions via Microsoft Defender for Endpoint (MDE) Live Response. These scripts automate common forensic operations.
Presented at BSides Cayman 2024
Use at Your Own Risk: These scripts are provided "as-is" without any warranties or guarantees. They have been developed and tested in a controlled environment, but the authors and contributors bear no responsibility for any unintended consequences resulting from their use. Always test in a non-production environment prior to deploying in live environments.