DFIR Investigator and Threat Hunter.
espresso-ir. IR tool for acquiring memory images from windows EC2 instances on AWS