Forensics NamePointsTags Giveaway300forensics, office, macros, vbscript Honeypot300forensics, windows, memory, volatility baby APT300forensics, wireshark