Wednesday, July 1, 2015


Kansa is a modular incident response framework written in Powershell.

Once downloaded and extracted, use the following command to “unblock” the .PS1 files.

ls -r *.ps1 | Unblock-File


The main purpose of the framework is to use PowerShell Remoting to obtain information from several clients.  Several pre-built scripts such as for Netstat are available that can be executed as standalone.


No comments:

Post a Comment