Forensic Discovery

[sawyl]

Favourably impressed by Farmer and Venema's book on Forensic Discovery, especially the sections on file system internals. My only criticism so far: too much concentration on ext2 and not enough on XFS, but I suspect that's just personal bias.