Do you ever consider PowerShell as the forensics tool? Learn how to use it to gather evidence in order to demonstrate what actually happened, even though hackers are doing their best to hide the traces. Tools and some extra step by step on how to recover files from the drive are included as a bonus, too.

In 2017 Fabio Gasperini was claimed to create a global network of hijacked computers by obtaining unauthorized information by Federal Bureau of Investigation. This acquitted him of more serious charges of cyber intrusion, wire fraud and conspiracy. If he had been convicted of all the charges, Gasperini would have faced up to 70 years in prison. What CQURE has to do with that?

My 2nd talk at the RSA Conference on misconfigurations and vulnerabilities.