Forensics 2. Context of this talk

1. Show what happened in some real incidents

2. Illustrate the cracker's modus operendi

3. Provide clues on what to look out for

4. Names changed to protect the innocent (and guilty :-)

5. Emphasis is on quick and easy forensics, see The Coroner's Toolkit for a much more advanced approach