Powering Up Incident Response with Power-Response


  • Drew Schmitt

Power-Response is an open source incident response framework that I developed with a few pals.

We wanted a better, faster, and more thorough way to collect data during incident response scenarios and have some analysis done without having to type a whole bunch more commands.

Some call us lazy, I say we are efficient.

Power-Response is a sweet menu-based framework that allows analysts to make their own plugins (or use the ones we have made) to gather data and respond to incidents quickly.

During this talk, we will focus on how to improve incident processes using a tool like Power-Response and what that means for the overall response effort.

This is our way of taking incident response knowledge and passing it to the community to go forth and forensicate. Check out Power-Response at