MANDIANT Metasploit Forensic Framework

The Metasploit Forensic Framework (MSFF) is a proof of concept tool that can potentially reconstruct an attacker's meterpreter sessions, allowing analysts to see some of the commands sent and received by the attacker from the metasploit console to the meterpreter server. It can give analysts a much better picture of what occurred.