File tree Expand file tree Collapse file tree
BlueTeam-Tools/IncidentResponse Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -52,17 +52,20 @@ The **IncidentResponse** folder contains focused **PowerShell scripts** designed
5252
5353- ✅ PowerShell 5.1 or newer
5454``` powershell
55- $PSVersionTable.PSVersion
56- ```
55+ $PSVersionTable.PSVersion
56+ ```
57+
5758- 🔐 Administrator rights
59+
5860- 🖥️ RSAT installed (for AD-related tools)
59- ``` powershell
60- Get-WindowsCapability -Name RSAT* -Online | Add-WindowsCapability -Online
61- ```
62- - 📦 Active Directory module:
63- ``` powershell
64- Import-Module ActiveDirectory
65- ```
61+ ``` powershell
62+ Get-WindowsCapability -Name RSAT* -Online | Add-WindowsCapability -Online
63+ ```
64+
65+ - 📦 Active Directory module:
66+ ``` powershell
67+ Import-Module ActiveDirectory
68+ ```
6669
6770---
6871
@@ -76,7 +79,7 @@ The **IncidentResponse** folder contains focused **PowerShell scripts** designed
7679## 💡 Optimization Tips
7780
7881- 🕓 ** Automate Actions:** Use Task Scheduler to schedule regular cleanups
79- - 📁 ** Centralize Outputs:** Store logs and reports in ` \\server\IncidentResponseLogs ` for SOC review
82+ - 📁 ** Centralize Outputs:** Store logs and reports in ` \\server\\ IncidentResponseLogs ` for SOC review
8083- 🔧 ** Customize Templates:** Adjust ` .txt ` config files for tailored remediation per incident type
8184
8285---
You can’t perform that action at this time.
0 commit comments