If you missed my presentation for Magnet Forensics Enterprise Pulse: PowerShell Tools for IR Forensics Collection, (or if you’d like to re-watch the presentation) – it’s now available on YouTube.
PDF of the slides is available on the CSIRT-Collect GitHub site.
Baker Street Forensics 