Here is a scenario you can think about. An administrator of a company has been accused of hoarding illegal material of questionable moral content on his company network system. You have been called upon to examine the suspect server and unearth evidence related to the said illegal material. Your boss has told you that you are not allowed to shutdown the server.
Read more »Forensic investigation using free Linux tools
http://www.linux-tip.net –
