Ecosyste.ms: Issues

An open API service for providing issue and pull request metadata for open source projects.

GitHub / Invoke-IR/PowerForensics issues and pull requests

#169 - Get-ForensicAmcache returns an error

Issue - State: open - Opened by Edelwy over 1 year ago - 3 comments

#168 - `Get-ForensicFileRecord` broken by Windows 11?

Issue - State: open - Opened by gabriellandau almost 2 years ago

#167 - Add buffering methods

Pull Request - State: closed - Opened by jpohls1 about 2 years ago - 1 comment

#164 - Update Get-ForensicFileSlack.md doc

Pull Request - State: closed - Opened by Sim4n6 over 3 years ago

#163 - Issues with Windows Server 2019

Issue - State: open - Opened by DennisL68 over 3 years ago

#162 - Add Feature Invoke-ForensicDD

Issue - State: open - Opened by m4dm4n over 3 years ago

#160 - Get-ForensicFileRecord : Destination array was not long enough.

Issue - State: open - Opened by RoYoMi almost 5 years ago

#159 - PowerForensicsPortable Issue

Issue - State: open - Opened by joe201745 about 6 years ago

#158 - Volume Shadow Copies

Issue - State: open - Opened by SamMaesschalck about 6 years ago - 1 comment

#157 - Error when using any cmdlet

Issue - State: open - Opened by beleka about 6 years ago

#156 - Forensic Timeline Type

Issue - State: open - Opened by beleka about 6 years ago

#155 - Fix README.md formatting

Pull Request - State: closed - Opened by vors about 6 years ago - 1 comment

#154 - Fixing CI tests

Pull Request - State: closed - Opened by vors about 6 years ago

#153 - AmCache Parser Update

Issue - State: open - Opened by jamdunnDFW over 6 years ago - 1 comment

#152 - Powershell Gallery

Issue - State: open - Opened by hackjammer over 6 years ago

#151 - Get-ForensicFileRecord : Path not found

Issue - State: open - Opened by trietptm over 6 years ago - 1 comment

#150 - Get-ForensicFileRecord : Array dimensions exceeded supported range.

Issue - State: open - Opened by AndresPae over 6 years ago - 5 comments

#149 - Get-ForensicTimeline Amcache Error on Windows 7

Issue - State: open - Opened by johnpaulglab almost 7 years ago - 1 comment

#148 - File mru

Pull Request - State: open - Opened by barbyfernicola almost 7 years ago - 2 comments

#147 - AddSHA256:Adds support for .gethash("SHA256")

Pull Request - State: closed - Opened by davehull about 7 years ago

#146 - Get-ForensicFileRecord throwing error

Issue - State: open - Opened by colindix over 7 years ago - 5 comments

#145 - Type [PowerForensic.Ntfs.FileRecord] not found

Issue - State: open - Opened by secusoc over 7 years ago - 21 comments

#144 - Create PowerforensicsInstall.ps1

Pull Request - State: open - Opened by opexxx over 7 years ago

#143 - PowerShell Remoting Usage

Issue - State: open - Opened by mr-burnse over 7 years ago - 3 comments

#142 - Copy-ForensicFile issue

Issue - State: closed - Opened by alexandreborges over 7 years ago - 9 comments

#141 - Implement FSCTL_ENUM_USN_DATA

Issue - State: closed - Opened by tophf almost 8 years ago - 7 comments

#140 - Get-ForensicFileRecord's GetChild doesn't work

Issue - State: open - Opened by tophf almost 8 years ago - 1 comment

#139 - Debug issue

Issue - State: closed - Opened by suminvr over 8 years ago - 3 comments

#138 - [Get-ForensicFileRecord] -Deleted switch parameter

Issue - State: open - Opened by jaredcatkinson over 8 years ago - 1 comment
Labels: enhancement, ready

#137 - Generic Bitmap class/parsing method

Issue - State: open - Opened by jaredcatkinson over 8 years ago
Labels: enhancement, ready

#136 - Differentiate between RAM Slack and File Slack

Issue - State: open - Opened by jaredcatkinson over 8 years ago - 2 comments
Labels: enhancement, ready

#135 - Test-ForensicBadCluster

Issue - State: open - Opened by jaredcatkinson over 8 years ago
Labels: enhancement, ready

#134 - Get-ForensicVolumeSlack

Issue - State: open - Opened by jaredcatkinson over 8 years ago
Labels: enhancement, ready

#133 - Error on build

Issue - State: closed - Opened by JamesHabben over 8 years ago - 3 comments

#132 - MBR GRUB BootCode Hash

Issue - State: open - Opened by JamesHabben over 8 years ago

#131 - Error parsing IndexAllocation for System32

Issue - State: closed - Opened by jaredcatkinson over 8 years ago - 1 comment
Labels: bug

#129 - Clean up VolumeBootRecord classes

Issue - State: open - Opened by jaredcatkinson over 8 years ago
Labels: enhancement

#128 - Change IntPtr to SafeFileHandle

Issue - State: closed - Opened by jaredcatkinson over 8 years ago - 1 comment
Labels: enhancement

#127 - Update all readDrive dependent functions

Issue - State: closed - Opened by jaredcatkinson over 8 years ago
Labels: enhancement

#126 - GuidPartitionTableEntry Class doesn't interpret partition type

Issue - State: closed - Opened by jaredcatkinson over 8 years ago
Labels: enhancement

#125 - Add -DrivePath & -PartitionNumber parameters to volume based cmdlets

Issue - State: open - Opened by jaredcatkinson over 8 years ago
Labels: enhancement

#124 - Remove as many GetSubArray method calls as possible

Issue - State: closed - Opened by jaredcatkinson over 8 years ago - 1 comment
Labels: enhancement

#123 - Push getVolumeName method calls to lower code

Issue - State: closed - Opened by jaredcatkinson over 8 years ago - 1 comment
Labels: enhancement

#122 - Add GetAttribute method to FileRecord class

Issue - State: open - Opened by jaredcatkinson over 8 years ago
Labels: enhancement

#121 - VolumeBootRecord CodeSection property

Issue - State: open - Opened by jaredcatkinson over 8 years ago
Labels: bug

#120 - MasterBootRecord Class BootCode Property

Issue - State: open - Opened by jaredcatkinson over 8 years ago
Labels: bug

#119 - not apply to EFI System

Issue - State: closed - Opened by horse9153 over 8 years ago - 2 comments

#118 - Add ability to reference volumes from raw disk access

Issue - State: open - Opened by jaredcatkinson over 8 years ago
Labels: enhancement

#117 - ValueKey.GetData() return formatted data

Issue - State: open - Opened by jaredcatkinson over 8 years ago

#116 - Finish OutlookCatalog class and cmldet

Issue - State: closed - Opened by jaredcatkinson over 8 years ago

#115 - Update all NTUSER.DAT objects to include the User

Issue - State: open - Opened by jaredcatkinson over 8 years ago

#114 - Add Mount Method to MBR and GPT Partitions

Issue - State: open - Opened by jaredcatkinson over 8 years ago

#113 - Add hivecheck method to RegistryHelper

Issue - State: closed - Opened by jaredcatkinson over 8 years ago

#112 - Add Get-ForensicOfficePlaceMRU cmdlet

Issue - State: open - Opened by jaredcatkinson over 8 years ago

#111 - Add Get-ForensicOfficeFileMRU cmdlet

Issue - State: open - Opened by jaredcatkinson over 8 years ago

#110 - Add Get-ForensicOfficeTrustRecord cmdlet

Issue - State: open - Opened by jaredcatkinson over 8 years ago

#109 - Manual, videos or usage examples?

Issue - State: closed - Opened by lgcambero over 8 years ago - 2 comments

#108 - Add db support to Registry Parser

Issue - State: closed - Opened by jaredcatkinson over 8 years ago
Labels: bug

#107 - Add support for MountPoints and MountPoints2

Issue - State: open - Opened by jaredcatkinson over 8 years ago
Labels: enhancement, ready

#106 - Add support for RecentDocs Key

Issue - State: open - Opened by jaredcatkinson over 8 years ago
Labels: enhancement, ready

#105 - Add cmdlet for RunMRU

Issue - State: closed - Opened by jaredcatkinson over 8 years ago
Labels: enhancement

#104 - ShellBag Support

Issue - State: open - Opened by jaredcatkinson over 8 years ago
Labels: enhancement, ready

#103 - Get-ForensicRegistryKey: Source array was not long enough

Issue - State: open - Opened by nremezov over 8 years ago - 8 comments
Labels: bug, ready

#102 - Get-ForensicNetworkList returns "Source array was not long enough"

Issue - State: open - Opened by nremezov over 8 years ago - 4 comments
Labels: bug, ready

#101 - Get-ForensicAmcache returns error

Issue - State: open - Opened by nremezov over 8 years ago - 5 comments
Labels: bug, ready

#100 - Get-ForensicRegistryKey errors if trailing \ is present

Issue - State: closed - Opened by jaredcatkinson over 8 years ago - 1 comment
Labels: bug

#99 - Add help for Get-ForensicExplorerTypedPath

Issue - State: closed - Opened by jaredcatkinson over 8 years ago
Labels: enhancement

#98 - Add help for Get-ForensicWindowsSearchHistory

Issue - State: closed - Opened by jaredcatkinson over 8 years ago - 1 comment
Labels: enhancement

#97 - NTUSER.DAT hives are not check

Issue - State: closed - Opened by jaredcatkinson over 8 years ago - 1 comment
Labels: bug

#96 - Get-RegistryKey does not show base

Issue - State: closed - Opened by jaredcatkinson over 8 years ago - 1 comment
Labels: bug

#95 - Get-ForensicNetworkList is not Windows XP compatible

Issue - State: open - Opened by jaredcatkinson over 8 years ago
Labels: bug, ready

#94 - Get-NetworkList -VolumeName needed

Issue - State: closed - Opened by jaredcatkinson over 8 years ago
Labels: enhancement

#93 - Removed the old *Raw cmdlets

Pull Request - State: closed - Opened by leechristensen over 8 years ago - 1 comment

#92 - NamedKey Get Method redundant name

Issue - State: open - Opened by jaredcatkinson over 8 years ago
Labels: bug, ready

#91 - BinShred should support padded elements

Issue - State: closed - Opened by LeeHolmes over 8 years ago - 1 comment

#89 - Get-ForensicPrefetch ValueFromPipelineByPropertyName

Issue - State: closed - Opened by jaredcatkinson over 8 years ago

#88 - Question: Get-ForensicBootSection -Path parameter values (and error message)

Issue - State: closed - Opened by juneb over 8 years ago - 5 comments

#87 - Format-ForensicHex is not present in 1.0.1.0

Issue - State: closed - Opened by juneb over 8 years ago - 3 comments

#86 - New: Invoke-ForensicBinShred; Rewrite: Invoke-ForensicTimeline; Add F…

Pull Request - State: closed - Opened by juneb over 8 years ago - 1 comment

#85 - Add errors to Registry Classes

Issue - State: closed - Opened by jaredcatkinson over 8 years ago - 1 comment
Labels: bug

#84 - Amcache Windows 10

Issue - State: closed - Opened by jaredcatkinson over 8 years ago - 1 comment
Labels: bug

#83 - Invoke-ForensicTimeline does not run in background

Issue - State: open - Opened by juneb over 8 years ago - 3 comments
Labels: enhancement, ready

#82 - Cmdlets require Unix-style volume format

Issue - State: closed - Opened by juneb over 8 years ago - 6 comments
Labels: bug

#81 - Use standard error messages

Issue - State: open - Opened by juneb over 8 years ago - 3 comments
Labels: enhancement, ready

#80 - Invoke-ForensicDD -Offset is mandatory

Issue - State: closed - Opened by juneb over 8 years ago - 3 comments
Labels: enhancement

#79 - Rename Invoke-ForensicBinShred to ConvertFrom-BinaryData (leaving 'BinShred' alias)

Issue - State: closed - Opened by juneb over 8 years ago - 6 comments

#78 - Prefetch Windows 10

Issue - State: open - Opened by jaredcatkinson over 8 years ago - 1 comment
Labels: bug, ready

#77 - Invoke-ForensicBinShred should support byte arrays

Issue - State: closed - Opened by mattifestation over 8 years ago - 1 comment

#76 - Add documentation for Invoke-ForensicBinShred in the wiki

Issue - State: closed - Opened by mattifestation over 8 years ago - 1 comment

#75 - Extended Partition Support

Issue - State: closed - Opened by jaredcatkinson over 8 years ago
Labels: enhancement

#74 - Add "Utc" to DateTime properties

Issue - State: open - Opened by jaredcatkinson over 8 years ago - 2 comments
Labels: enhancement, ready

#73 - VolumeName is mandatory on Get-ContentRaw

Issue - State: closed - Opened by jaredcatkinson over 8 years ago
Labels: bug

#72 - Master Boot Record - Extended Partitions

Issue - State: closed - Opened by jaredcatkinson over 8 years ago
Labels: bug

#71 - Pester Test Update

Issue - State: open - Opened by jaredcatkinson over 8 years ago
Labels: enhancement, ready

#64 - Add Shellbag parser

Issue - State: open - Opened by jaredcatkinson over 8 years ago
Labels: enhancement, ready

#61 - Add public interface into Hash class

Issue - State: closed - Opened by jaredcatkinson over 8 years ago - 2 comments
Labels: enhancement

#35 - Internet Explorer History Parser

Issue - State: open - Opened by jaredcatkinson over 8 years ago
Labels: enhancement, ready