Linux and Forensics

• Forensics is the art and the science of bringing what is hidden out in the open, and open is what Linux is all about.

• Linux is a powerful tool in the examiners toolkit.

  • Bootable Business cards go everywhere
  • Many different systems can be analyzed
  • Powerful backup in multi-platform multi-tool analysis

• Linux systems will be subject to examinations.

  • Systems will get broken into
  • Crimes will be committed
  • Lawsuits will be brought by you and against you
  • Companies and individuals will want to cover their posteriors

Notes: