Nice post :) If you run reviews again — we’ve just released another free host collection tool that might be worth including -> https://medium.com/@cloudyforensics/introducing-cado-host-a-free-tool-to-collect-forensic-artefacts-from-compromised-systems-e2f93ff5a532