See: http://www.routards.org/2010/06/defcon-17-quals-forensics-300.html