added pset5 forensics