Get the Whitepaper called Covert Post-Exploitation Forensics With Metasploit.
You can download it from the following link: https://packetstormsecurity.com/files/download/105194/covert-forensics.pdf
Source: https://packetstormsecurity.com/files/105194/Covert-Post-Exploitation-Forensics-With-Metasploit.html