Forensicist
I posted about Carving utmp records for intrusion analysis using utmp scanner of bulk_extractor-rec
