Jack Halstead's repositories
IR-Incident-Event-Timeline
Excel-based Event Timeline with customizable legend for Artefacts, Assets and Activity Type
NTUSER-UsrClass-Extractor
PowerShell script to pull NTUser & UsrClass from live hosts, mounted images or KAPE targets folder