Applocker is a part of Windows 7/8 Enterprise. It allows an entire organization to eliminate malware. It is seriously that powerful! It works by whitelisting, or allowing, a specific set of trusted executables to run. Once setup, AppLocker is easy to manage. However, if an untrusted executable is ran, you still have to search the event log to gather the AppLocker Errors.
To get a picture of how ugly that event log is, here is a screenshot:
Now imagine opening up the event log for multiple machines! Not fun at all! To help aggregate these logs, we are going to use PowerShell!