A system administrator must have full control over a system and a network but if for some reason got it out of control you must know who to troubleshoot and do the repair work. To do a clean repair work you must know how and from where to start the investigation. All you want to do is to find cool, efficient and fast forensic tools to start the troubleshooting. Types of analysis might have nothing to do with the troubleshoot but its important to organize the tools in a better way so that you can find the appropriate one required for the troubleshoot.
