edition and was written in part as a companion to the SANS Institute course for Mac OS