Good stuff from @bgarnett17 on the SANS Forensics blog: http://bit.ly/9X2Nns

Aug 27, 2010 · 2:31 AM UTC