An Incident Response Plan is something valueable to have in the case of an incident. But where to start and what to cover in an incident response plan.

After the write up , how do I know the right things are on paper ? Let's test the scenario with your CIRT Team and what are your opions and powershell ready to use CMDlets to operate fast and effective in the search for where the incident took place.