This space contains scripts I have created to try to automate basic analisys or triage for incident evidence.
It works for me, maybe could be useful for you.
#evidence-parser
Powershell scripts that executes and stores the results for executing common tools like #RegRipper, #MFTAnalyze and Plazo to evidence collectedd using velociraptor. It requires the file WindowsEventID.txt to look for specific strings, you casn improve this file for better results.
#pssigma-check
An script where I try to improve results from SIGMA for my own analysis. Still working on it :)