For your weekend reading pleasure, I'm happy to announce a small update to my Linux Forensics class-- now with a new module on EXT4 and some fixes of previous errata. Always free at archive.org/details/HalLinux…

Jul 2, 2021 · 12:08 PM UTC

3
48
1
112
Replying to @hal_pomeranz
still waiting for "btrfs" to yield more than one result when searching through your slides... :)
2
1
When I get to BTRFS it will be a series of blog posts like my earlier EXT4 and XFS work. But it's going to take a big case with a lot of BTRFS to get me to do that research.
1
Replying to @hal_pomeranz
Sir can you recommend any good resource for a student starting with forensics.
1
Check out @attrc's reading list here
Andrew Case @attrc
16 Aug 2018
This pages contain my list of Recommended Reading books related to #DFIR & #infosec: dfir.org/?q=node/8 If you know of a book written in the last 2-3 years that is missing then please let me know so that I can review it!
1
1
more replies
Replying to @hal_pomeranz @harrisonamj
Thanks very much @hal_pomeranz once again !
1