Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
Examining machines and data to reconstruct what happened, in a way that holds up if someone challenges it later. The evidence includes deleted files, browser history, leftover traces of programs that ran, and timestamps. The whole discipline is in not changing the evidence while reading it.