Sys Admin Magazine
has an article describing the uses of The Coroner's Toolkit
which is a open source digital forensics toolkit. (You use this after you image the drive.)
This is just a magazine article about the toolkit, if anyone knows of a good lesson or how-to, please post it in comments.
Post a Comment