Mike

ESXtract. ESXtract is a project focused on improving the forensics collection process from ESXi hosts.

Kape2ADX. This is a project for automating your KAPE process. Currently, this project takes KAPE .zips found in blob storage, turns the artefacts into super timelines, then uploads the .csv back to Blob. You can optionally connect blob as a data source to Azure Data Explorer to then do forensics via KQL.

DetectionDevelopment. PowerShell