I’m an independent consultant specializing in Incident Response, Digital Forensics, and Expert Witness work. I’m passionate about Unix/Linux, having started my career as a Unix Sys Admin back in the 1980’s. You may have heard of me because of my training work with the SANS Institute or Antisyphon.
You can find the courseware for my Linux Forensics class available for free at https://archive.org/details/HalLinuxForensics
Other presentations and technical writing at https://deer-run.com/~hal/