Finalizing our @defcon presentation on WMI forensics with @mattifestation & @cteo13. Ever wondered what that OBJECTS.DATA file was?