https://hackersonlineclub.com/csirt-powershell-script-to-collect-memory-and-triage-disk-forensics/
CSIRT- PowerShell Script To Collect Memory And (Triage) Disk Forensics