SANS course updates: adding details on Kaminsky DNS attack, plus info on indirect block pointers for Unix file system forensics