Black Hat Intruder Discovery / Tracking and Compromise Analysis
Course Notes
Student Data Files
The Coroner's Toolkit docs
The Coroner's Tookit man pages
Lazarus output example