Misc Incident Handling Scripts

PowerShell - Enumerate all External hosts connections (Hunting)  Download

Misc Guides and Manuals for Incident Handling

General Tips for Manual Incident Response (Hunt Ops)  Download

Sample Incident Response Log  Download

JPCert has publishes an in-depth list of common tools used by threat actors and the Windows Events and artifacts left behind... 

Pentest-Zen (ExitC0de00c.com)