3 ms·

Does anyone know if this information was collected as part of a monitoring service or if it was collected by forensically recovering the data from the laptops h

• londons_explore 10y ago
  If the laptop was re-imaged to Windows, I doubt much of the syslogs from linux were left. Especially since windows is much bigger than a default linux install these days, and this was a rarely used laptop, it seems unlikley any linux was left, even in free sectors.
  • chx 10y ago
    No, it was running Windows and was reimaged to Linux. It is very strongly implied this was done to cover tracks as it was never switched on again.