Issue #93 / Aug 2008

The arrival of Ubuntu 8.04 “Hardy Heron” signaled a new era for the whole family of distributions that use Ubuntu as a base. Kubuntu, Edubuntu, Mythbuntu, and other Ubuntu derivatives soon followed with new releases of their own projects.

You don't need expensive proprietary tools to practice the craft of computer forensics.

Once you determine a system has been attacked, boot to the BackTrack Live forensics distro and start your investigation with Sleuth Kit.

Modern filesystems make forensic file recovery much more difficult. Tools like Foremost and Scalpel identify data structures and carve files from a hard disk image.

A forensics expert explains how to extract interesting details from a confiscated Windows hard disk using standard Linux tools.