Introduction to Forensics

Kyle Rankin (QuinStreet, Inc.)
Linux, Security
Location: Ballroom A7
Average rating: ****.
(4.22, 9 ratings)

In this talk Kyle Rankin will provide an introduction to performing forensics analysis on Linux machines using the popular Sleuthkit tools with their easy-to-use Autopsy web-based front-end. The talk will cover initial installation and configuration of Sleuthkit and Autopsy, basic concepts and considerations for a forensics investigation, and at the end there will be a demo with a real, compromised Linux image.

Kyle Rankin

QuinStreet, Inc.

Kyle Rankin is a systems architect for Quinstreet Inc.; the current president of the North Bay Linux Users’ Group; the author of Knoppix Hacks, Knoppix Pocket Reference, Linux Multimedia Hacks, and Ubuntu Hacks; and a contributer to a number of other O’Reilly books. Rankin is a columnist for Linux Journal, has written for PC Magazine, TechTarget websites and other publications. He speaks frequently on Open Source software including at OSCON, Linux World Expo, Penguicon. and a number of Linux Users’ Groups.

Comments on this page are now closed.


Akkana Peck
07/24/2009 4:05pm PDT

Very well organized and presented, interesting and full of useful information.

Picture of Mark J. Levitt
Mark J. Levitt
07/24/2009 12:05pm PDT

@Nikola, it looks like Kyle has posted them here:

Nikola Vassilev
07/24/2009 1:33am PDT

Is it possible to have the slides posted here please? Thanks!

Picture of Chris Sontag
Chris Sontag
07/23/2009 4:59pm PDT

This was fascinating. The speaker is engaging and clearly well informed. This, BY FAR, was one of the top 3 sessions of OSCON09.

  • Intel
  • Microsoft
  • Google
  • Sun Microsystems
  • Facebook
  • Gear6
  • Kaltura
  • Liferay
  • MindTouch
  • Novell, Inc.
  • Open Invention Network
  • Rackspace Cloud
  • Schooner Information Technology
  • Silicon Mechanics
  • Symbian Foundation
  • Twilio
  • WSO2
  • Yabarana Corporation

Sponsorship Opportunities

For information on exhibition and sponsorship opportunities at the conference, contact Sharon Cordesse at

Download the OSCON Sponsor/Exhibitor Prospectus

Media Partner Opportunities

Download the Media & Promotional Partner Brochure (PDF) for information on trade opportunities with O'Reilly conferences or contact mediapartners@

Press and Media

For media-related inquiries, contact Maureen Jennings at

OSCON Newsletter

To stay abreast of conference news and to receive email notification when registration opens, please sign up for the OSCON newsletter (login required)

Contact Us

View a complete list of OSCON contacts