Slides for "Linux Forensics for Non-Linux Folks" (finally) up: deer-run.com/~hal/LinuxForen… [Apologies for the delay, SANS Phoenix attendees]