Forensic Analysis of a Compromised Linux Harddisk
http://silverstr.ufies.org/fvlug-forensics-intro.ppt
This is a presentation that DanaEpp gave for FVLUG on December 8, 2003. A demo of a forensic investigation was done using Knoppix-STD.
Links & Resources
See also LinuxSecurity, Linux, fvlug