DFIR related tools I threw together