Alan Paller is director of research for the SANS Institute, a provider of security training and certification.

A few Sundays ago, the managing partner and IT partner from a large law firm in New York came to my home for a visit. It wasn't just for coffee. They had flown down to Washington to discuss what they might do in the aftermath of a troubling visit from the FBI.

Here's how the conversation went. Read full story >

EXT4 is a next generation file system replacement for the EXT2/EXT3 family of Linux file systems. It was accepted as "stable" in the Linux 2.6.28 kernel in October 2008[1]. As of this writing, it's starting to appear as the default file system in newer versions of several Linux distros. While the developers did try to maintain some degree of backwards compatibility with EXT2/EXT3, there is quite a bit that's new and different with EXT4. Popular forensic tools like the Sleuthkit are not fully compatible with these changes in EXT4, although some of their functionality does still work.

Full Story