<p>Tested Windows 10</p><h2><br></h2><h2>Description</h2><p>With this application, it is aimed to accelerate the incident response processes by collecting information in windows operating systems via winrm.</p><h2><br></h2><h2>Features</h2><p>Information is collected in the following contents.</p><p>IP Configuration</p><p>Users</p><p>Groups</p><p>Tasks</p><p>Services</p><p>Task Scheduler</p><p>Registry Control</p><p>Active TCP &amp; UDP ports</p><p>File sharing</p><p>Files</p><p>Firewall Config</p><p>Sessions with other Systems</p><p>Open Sessions</p><p>Log Entries</p><h2><br></h2><h2>Installation</h2><p>git clone <a href="https://github.com/anil-yelken/pywirt" rel="noopener noreferrer" target="_blank">https://github.com/anil-yelken/pywirt</a></p><p>cd pywirt</p><p>pip3 install pywinrm</p><h2><br></h2><h2>Usage</h2><p>The following information should be specified in the cred_list.txt file:</p><p>IP|Username|Password</p><p><a href="https://github.com/anil-yelken/pywirt/blob/main/cred_list.jpg" rel="noopener noreferrer" target="_blank"><img src="https://github.com/anil-yelken/pywirt/raw/main/cred_list.jpg"></a></p><p><br></p><p><a href="https://github.com/anil-yelken/pywirt/blob/main/pywint.jpg" rel="noopener noreferrer" target="_blank"><img src="https://github.com/anil-yelken/pywirt/raw/main/pywint.jpg"></a></p><h2><br></h2><h2>Contact</h2><p><a href="https://twitter.com/anilyelken06" rel="noopener noreferrer" target="_blank">https://twitter.com/anilyelken06</a></p><p><a href="https://medium.com/@anilyelken" rel="noopener noreferrer" target="_blank">https://medium.com/@anilyelken</a></p><p><a href="https://github.com/anil-yelken" rel="noopener noreferrer" target="_blank">https://github.com/anil-yelken</a></p>

Pywirt - Python Windows Incident Response Toolkit

Description

Features

Installation

Usage

Contact

Comments