Nikkel, Bruce
Practical Linux Forensics: - A Guide for Digital - Investigators
- ISBN 13:
- 9781718501966
- author:
- Nikkel, Bruce
- format:
- Paperback
- publisher:
- No Starch Press
- language:
- English
- Publication Year:
- 2022
- Pages:
- 400
- Dimensions:
- 23.1 x 17.8 x 2.8 centimetres (0
- Genre:
- Computers, Operating Systems, Linux,
- Condition:
- New
- Availability:
- Item usually sent within 10 working days
Description
Practical Linux Forensics: A Guide for Digital Investigators provides in-depth analysis and techniques for forensic investigators to locate, analyze, and understand digital evidence found on modern Linux systems. This guide covers the technical details of analyzing postmortem forensic images of Linux systems that have been misused or targeted by malicious attacks. You'll learn how to identify digital artifacts of interest, draw logical conclusions, and reconstruct past activity from incidents. The book delves into the inner workings of Linux from a digital forensics perspective, helping you interpret evidence from Linux environments. Topics include extracting evidence from storage devices, investigating logs, and analyzing installed software. By mastering these techniques, you'll be able to extract valuable insights from Linux systems, even without relying on specific forensic analysis platforms or tools.