tag

#forensics

2 posts

LinuxDeep Dive October 4, 2026 7 min read

Linux printk Ring Buffer: Sequence, Retention, and /dev/kmsg Evidence

Read Linux kernel logs as bounded printk records, distinguish console filtering from retention, and preserve evidence before ring-buffer overwrite.

#linux#printk#kernel

FreeDOSDeep Dive October 3, 2026 9 min read

Decode FAT creation, access, and write timestamps on FreeDOS, including two-second precision, local-time ambiguity, valid ranges, and audit limits.

#freedos#fat#timestamps