Linux forensics

Dana Epp's ramblings at the Sanctuary : Forensic Analysis of a Live Linux System
There's a post referring on to an intereting set of presentations about Linux Forensics over at Dana Epp's Blog...