It's better to start from the parent page otherwise you're missing all context:
https://www.rskey.org/~mwsebastian/miscprj/forensics.htm
This is where this post should probably point, IMHO.