Forensic Lunch 4/3/15 - Devon Kerr - WMI and DFIR and Automating DFIR

Hello Reader,

We had another great Forensic Lunch!

Guests this week:
Devon Kerr talking about his work at Mandiant/Fireeye and his research into WMI for both IR and attacker usage.

• You can email Devon here: devon.kerr@mandiant.com 
• You can follow him on twitter here: https://twitter.com/_devonkerr_
• Get cool tools from the Mandiant github here: https://github.com/mandiant
• Watch Devon talk more about WMI and IR at the SANS DFIR Summit: http://dfir.to/1BvOw7G

Matthew and I going into the Automating DFIR series and our upcoming talk at CEIC

• We are on the CEIC agenda here:
• https://www.guidancesoftware.com/ceic/Pages/ceic-agenda-table.aspx
• and here is the latest post in the Automating DFIR Series:
•  http://www.hecfblog.com/2015/03/automating-dfir-how-to-series-on_22.html

You can watch the show on Youtube:  https://www.youtube.com/watch?v=y-xtRkwaP2g

or below!