PowerShell shouldn’t just be used by pen testers! Attendees of this talk will learn how to conduct each phase of the IR process using PowerShell as a means to increasing the cadence and completness of their DFIR program.