PowerShell for Live Investigations and Triage