https://teamrocketist.github.io/2019/03/05/Forensics-BsidesSF-2019-goodluks3/

Original writeup (https://teamrocketist.github.io/2019/03/05/Forensics-BsidesSF-2019-goodluks3/).