## Lab 6
<!-- th -->
!th[c](lab6.png)

1. 0
2. last -f /var/log/wtmp
3. c2460ce1b6c33da7af5e4d0043cfd22a
4. python3 vol.py -f /home/jason/Linux.mem linux.pslist