powershell compare lastwritetime to current date. You then capture