CHAPTER 9 Linux Forensics
by Chuck Easttom
System Forensics, Investigation, and Response, 3rd Edition
- Cover Page
- Title Page
- Copyright Page
- Content
- Preface
- About the Author
- PART I Introduction to Forensics
- CHAPTER 1 Introduction to Forensics
- What Is Computer Forensics?
- Understanding the Field of Digital Forensics
- Knowledge Needed for Computer Forensics Analysis
- The Daubert Standard
- U.S. Laws Affecting Digital Forensics
- The Federal Privacy Act of 1974
- The Privacy Protection Act of 1980
- The Communications Assistance for Law Enforcement Act of 1994
- The Electronic Communications Privacy Act of 1986
- The Computer Security Act of 1987
- The Foreign Intelligence Surveillance Act of 1978
- The Child Protection and Sexual Predator Punishment Act of 1998
- The Children’s Online Privacy Protection Act of 1998
- The Communications Decency Act of 1996
- The Telecommunications Act of 1996
- The Wireless Communications and Public Safety Act of 1999
- The USA Patriot Act of 2001
- The Sarbanes-Oxley Act of 2002
- 18 U.S.C. § 1030: Fraud and Related Activity in Connection with Computers
- 18 U.S.C. § 1020: Fraud and Related Activity in Connection with Access Devices
- The Digital Millennium Copyright Act (DMCA) of 1998
- 18 U.S.C. § 1028A: Identity Theft and Aggravated Identity Theft
- 18 U.S.C. § 2251: Sexual Exploitation of Children
- Warrants
- Federal Guidelines
- CHAPTER SUMMARY
- KEY CONCEPTS AND TERMS
- CHAPTER 1 ASSESSMENT
- CHAPTER 2 Overview of Computer Crime
- CHAPTER 3 Forensic Methods and Labs
- CHAPTER 1 Introduction to Forensics
- PART II Technical Overview: SystemForensics Tools, Techniques, and Methods
- CHAPTER 4 Collecting, Seizing, and Protecting Evidence
- CHAPTER 5 Understanding Techniques for Hiding and Scrambling Information
- CHAPTER 6 Recovering Data
- CHAPTER 7 Email Forensics
- CHAPTER 8 Windows Forensics
- CHAPTER 9 Linux Forensics
- Linux and Forensics
- Linux Basics
- Linux File Systems
- Linux Logs
- Linux Directories
- Shell Commands for Forensics
- The dmesg Command
- The fsck Command
- The grep Command
- The history Command
- The mount Command
- The ps Command
- The pstree Command
- The pgrep Command
- The top Command
- The kill Command
- The file Command
- The su Command
- The who Command
- The finger Command
- The dd Command
- The ls Command
- Can You Undelete in Linux?
- Manual Method
- Kali Linux Forensics
- Forensics Tools for Linux
- CHAPTER SUMMARY
- KEY CONCEPTS AND TERMS
- CHAPTER 9 ASSESSMENT
- CHAPTER 10 Macintosh Forensics
- CHAPTER 11 Mobile Forensics
- CHAPTER 12 Performing Network Analysis
- PART III Incident Response and Resources
- CHAPTER 13 Incident and Intrusion Response
- CHAPTER 14 Trends and Future Directions
- CHAPTER 15 System Forensics Resources
- APPENDIX A Answer Key
- APPENDIX B Standard Acronyms
- Glossary of Key Terms
- References
- Index
CHAPTER 9: Linux Forensics
IN THIS CHAPTER, YOU LEARN ABOUT forensics on a Linux system. Assuming you may not have a good working knowledge of Linux, this chapter spends a significant amount of time giving you the basic background in Linux required to do forensics. Then, you learn about specific shell commands, directories, and logs that are important to a forensic investigation of a Linux system.
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.