I've been lucky enough to spend the week learning from @hal_pomeranz in @SANSInstitute SEC506. This guy has been doing Unix for a long time. He's got tons of useful nuggets of knowledge stored in the noggin of his. Thanks Hal.