If you missed my presentation for Magnet Forensics Enterprise Pulse: PowerShell Tools for IR Forensics Collection , (or if you’d like to re-watch the presentation) - it’s now available on YouTube.

PDF of the slides is available on the CSIRT-Collect GitHub site.

https://youtu.be/HpYxciMqEzM