This week I\xa0talk about details about what to look at in Scheduled Task records for forensic triage.