This tool collects different artefacts on live Windows and records the results in csv files. With the analyses of this artefacts, an early compromission can be detected.
more here..............https://github.com/SekoiaLab/FastResponder
more here..............https://github.com/SekoiaLab/FastResponder