PowerShell checks to snapshot processes, autostart, services, accounts, persistence and Defender status — without changing anything.