The thank goodness April Fools day is over editionGuests this week:Devon Kerr talking about his work at Mandiant/Fireeye and his research into WMI for both IR and attacker usage.You can email Devon here: [email protected] you can follow him on twitter here: https://twitter.com/_devonkerr_Get cool tools from the Mandiant github here: https://github.com/mandiantWatch Devon talk more about WMI and IR at the SANS DFIR Summit: http://dfir.to/1BvOw7G Matthew and I going into the Automating DFIR series and our upcoming talk at CEICWe are on the CEIC agenda here:https://www.guidancesoftware.com/ceic...