Why don't you start explore SF by yourself? The problem is to get by the encryption and possible VM...SF1 and SF2 was pretty simple if you compare them to SF3. Tricky to get "clean" dumps, at least what I have tested so far there seems to be alot of manual work and lots of reboots....a real sophisticated biatch
