For your weekend reading pleasure, I'm happy to announce a small update to my Linux Forensics class-- now with a new module on EXT4 and some fixes of previous errata. Always free at archive.org/details/HalLinux…
3
48
1
112
still waiting for "btrfs" to yield more than one result when searching through your slides... :)
2
1
The tool in my Twitter handler is from the Btrfs parser tool I worked on. Me and one of my student did probably more than 150 pages of btrfs forensics back in 2017, but unfortunately it never saw the light!
2
1
Replying to @binaryz0ne @jarlethorsen
Dude! The world needs you to publish that BTRFS work!

Jul 3, 2021 · 3:15 AM UTC

1
3
Replying to @hal_pomeranz @jarlethorsen
Hal, it's a long story and don't want to list excuses! Let me see what I can do about the research + the code. Maybe find someone that will help me put the pieces back together... Turned out this was in 2016!
2
3