Practical Linux Forensics: A Guide for Digital Investigators

10/10

While a casual user of Linux operating systems, I’m primarily trained and familiar with forensically examining Windows OS.After studying this book, and testing various topics referenced, I am more familiar of the investigative value of the artifacts presented throughout - from filesystems to pattern of life activity. Undoubtedly, I am now more informed on performing deadbox forensics on a Linux OS.The book well is organized. Going through each chapter, I felt that I wasn’t left behind and was able to build on the information I comprehended from the previous chapter. I think Nikkel found an appropriate balance with the detail presented for the scope of this book - analysis of deadbox Linux operating systems.The book is now marked up and tabbed so I can always reach out and reference the valuable information it contains.

It was suitable for the class