opexxx
10/21/2016 - 7:24 AM

PowerforensicsInstall

PowerforensicsInstall

# Make sure the module is not loaded
Remove-Module Powerforensics -ErrorAction SilentlyContinue
# Download latest version
$webclient = New-Object System.Net.WebClient
$url = "https://github.com/Invoke-IR/PowerForensics/archive/master.zip"
Write-Host "Downloading latest version of Powerforensics from $url" -ForegroundColor Cyan
$file = "$($env:TEMP)\Powerforensics.zip"
$webclient.DownloadFile($url,$file)
Write-Host "File saved to $file" -ForegroundColor Green
# Unblock and Decompress
Unblock-File -Path $file
$targetondisk = "$([System.Environment]::GetFolderPath('MyDocuments'))\WindowsPowerShell\Modules"
New-Item -ItemType Directory -Force -Path $targetondisk | out-null
$shell_app=new-object -com shell.application
$zip_file = $shell_app.namespace($file)
Write-Host "Uncompressing the Zip file to $($targetondisk)" -ForegroundColor Cyan
$destination = $shell_app.namespace($targetondisk)
$destination.Copyhere($zip_file.items(), 0x10)
# Rename and import
Write-Host "Renaming folder" -ForegroundColor Cyan
Rename-Item -Path ($targetondisk+"\Powerforensics-master") -NewName "Powerforensics" -Force
Write-Host "Module has been installed" -ForegroundColor Green
Import-Module -Name Powerforensics
Get-Command -Module Powerforensics