Part 1 - Introduction
Part 2 - Memory Dumps, Debuggers and Logs
Part 3 - Information Collection: Scripts
Original presentation from Microsoft GEC
Virtual presentation on Citrix community blogs