# joeavanzato/RetrievIR

<https://repo.masters-masters.com/en/repos/joeavanzato/RetrievIR>

[Home](https://repo.masters-masters.com/en) › [joeavanzato](https://repo.masters-masters.com/en/owners/joeavanzato) › [RetrievIR](https://repo.masters-masters.com/en/repos/joeavanzato/RetrievIR)

joeavanzato/RetrievIR has 116 stars on GitHub. Its RepoMasters card: Prototype tier. PowerShell script designed to help Incident Responders collect forensic…

| Field | Value |
| --- | --- |
| Owner | [joeavanzato](https://repo.masters-masters.com/en/owners/joeavanzato) |
| Stars | 116 |
| Forks | 15 |
| Language | [PowerShell](https://repo.masters-masters.com/en/languages/powershell) |
| License | MIT |
| Created | 2023 |
| Topics | dfir, evidence, forensics, forensics-investigations, forensics-tools, incident-response, incident-response-tooling, powershell |
| Tier | [Prototype (100 to 249 ★)](https://repo.masters-masters.com/en/ranks/rush) |
| View on GitHub | [joeavanzato/RetrievIR](https://github.com/joeavanzato/RetrievIR) |

## Repository

PowerShell script designed to help Incident Responders collect forensic evidence from local and remote Windows devices.

The tier for repos with 100 to 249 ★. Published odds per card pulled: 70%. Rarity: Common.

## More repos by joeavanzato

- [joeavanzato/Trawler · ★ 343 · PowerShell · Alpha](https://repo.masters-masters.com/en/repos/joeavanzato/Trawler)
- [joeavanzato/LogBoost · ★ 114 · Go · Prototype](https://repo.masters-masters.com/en/repos/joeavanzato/LogBoost)

## Nearby in PowerShell

- [JoeInnsp23/claude-glm-wrapper · ★ 116 · PowerShell · Prototype](https://repo.masters-masters.com/en/repos/JoeInnsp23/claude-glm-wrapper)
- [FirstEverTech/Universal-Intel-WiFi-BT-Updater · ★ 116 · PowerShell · Prototype](https://repo.masters-masters.com/en/repos/FirstEverTech/Universal-Intel-WiFi-BT-Updater)
- [Fanqi89/dsh-rea · ★ 116 · PowerShell · Prototype](https://repo.masters-masters.com/en/repos/Fanqi89/dsh-rea)
- [dfinke/PSharp · ★ 116 · PowerShell · Prototype](https://repo.masters-masters.com/en/repos/dfinke/PSharp)
- [lazywinadmin/LazyTS · ★ 116 · PowerShell · Prototype](https://repo.masters-masters.com/en/repos/lazywinadmin/LazyTS)
- [regisf/virtualenvwrapper-powershell · ★ 116 · PowerShell · Prototype](https://repo.masters-masters.com/en/repos/regisf/virtualenvwrapper-powershell)

---
Data: GitHub · Illustration drawn by RepoMasters from the repo’s ID and its language color.