I am currently re-aggregating my tools here, so expect it to grow along time.
Forensics
| Forensic Method | Hints and notes |
|---|---|
| Microsoft Teams user generated content | Finding cached Teams resources from Teams client's IndexedDB |
| SSH auth logs | /var/log/auth.log shows SSH logins: public/private key hashes tells who it was |