$since = (Get-Date).AddDays(-1) fsutil usn readjournal C: csv | Select-String -Pattern 'RENAME_OLD_NAME|RENAME_NEW_NAME|FILE_CREATE|FILE_DELETE'