Section 3: Linux Forensic Analysis

This section will focus on aspects of Linux memory acquisition and analysis. The tracking of user actions and the detection and analysis of malware from a Linux forensics perspective will be covered in detail.

This section of the book comprises the following chapters:

• Chapter 7, Linux Memory Acquisition
• Chapter 8, User Activity Reconstruction
• Chapter 9, Malicious Activity Detection