Too Long; Didn't Read
Danderspritz, NSA post-exploitation tool, has some interesting reconnaissance scripts, which were used in covert operations. Basically, they gather as much information as possible about drivers, memory, network traffic (<em>DSky</em>) or <em>PSP </em>(Personal Security Product — AV software).