A Powershell incident response framework