Webcast: Linux Forensics Magical Mystery Tour With Hal Pomeranz





One of our favorite BHIS guest presenters, Hal Pomeranz, returns for more of the Linux goodness.

Roll up for a magical tour through the mysteries of Linux file systems! Relative atime updates, block groups, and allocation strategies, deleted directory entries, and even more will be revealed! This information will help you understand your Linux timelines and recover deleted data more quickly. It’s a perilous journey off the beaten path from which you will not return unchanged!

Join the Black Hills Information Security Discord discussion server — https://discord.gg/aHHh3u5

Slides for this webcast can be found here: https://www.blackhillsinfosec.com/wp-content/uploads/2020/08/SLIDES_LinuxMagicalMysteryTour.pdf

0:00 – Head On Over

1:10 – Someone Please Introduce Hal Pomeranz

5:49 – Let’s Talk About EXT (baby)

8:13 – Having Atime

19:25 – Directories

28:29 – Deleting Files

38:23 – File Allocation & Deleted Data Recovery

1:07:23 – Closing Statements



Ready to learn more?

Level up your skills with affordable classes from Antisyphon!

Pay-What-You-Can Training

Available live/virtual and on-demand