IRCR
Platforms:
Windows 2000,
Windows NT,
Windows XP
Categories:
Auditing,
Forensics
Version: 2.1
URL: http://tools.phantombyte.com/
The Incident Response Collection Report is a script to call a collection of tools that gathers
and/or analyzes data on a Microsoft Windows system. You can think of this as a snapshot of the
system in the past. Most of the tools are oriented towards data collection rather than analysis.
The idea of IRCR is that anyone could run the tool and send the output to a skilled computer security
professional for further analysis.
IRCR v2 is a complete code change from Perl to DOS batch file. Anyone should be able to modify
the batch file to their needs.
