COMP 2555 Forensics Lecture 9

Topics Covered:

• Review of commands from  pp. 122—142, Module 3 of CERT Book
  • grep
  • df
  • w
  • dd
• Data recovery (Chapter 5 from Vacca)

Announcements:

• Midterm review next week

Useful Links & Additional Reading:

• bmap and slack space
• backup using 7-zip
• /dev/zero
• slides