Get-ChildItem $env:TEMP -Recurse -Filter *.log -Force | Where-Object { $_.LastWriteTime -gt (Get-Date).AddHours(-1) } | Sort-Object LastWriteTime -Descending | Format-Table LastWriteTime, FullName -AutoSize -Wrap
Get-WinEvent -FilterHashtable @{LogName='Application'; ProviderName='MsiInstaller'; StartTime=(Get-Date).AddHours(-1)} -ErrorAction SilentlyContinue | Select-Object TimeCreated, Id, Message | Format-List
Get-ItemProperty HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\*, HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\* -ErrorAction SilentlyContinue | Where-Object { $_.DisplayName -match 'Autodesk|AutoCAD|FormIt|Revit' } | Select-Object DisplayName, PSChildName, InstallSource | Format-Table -AutoSize -Wrap
Select-String "$env:TEMP\*.log" -Pattern "error status: [1-9]"