Will be doing an excerpt from my SANS class ("Intro to Linux Digital Forensics") for the 2/5 PDXLinux user group meeting (see pdxlinux.org)