Forensic Examination on Linux

Linux systems are subject to break-ins just like any other system.
Many break-ins fall under federal criminal statutes and may result in investigations by law enforcement.
Break-ins may result in civil suits and other actions within the court of law.
It's in the best interest of a system's owners to know how to protect their legitimate and private information while preserving the ability to investigate criminal activity directed against them.

Linux systems are subject to break-ins just like any other system.