First page Back Continue Last page Overview Graphics
Using Linux in Forensics
Linux is a powerful tool for use in forensics.
Because it is "open", it can be independently verified.
As a primary tool, Linux has a wide array of applications for analysis and investigation available.
As a secondary tool, Linux can affirm the results obtained from other systems and reinforce the confidence in the evidence gathered and presented.
Linux can be used to investigate other operating systems and file systems, even unsupported ones.