Exam Essentials
Know how use the LinEn for Linux tool. Be able to explain the various conditions that would warrant a LinEn acquisition. Explain the importance of modifying Linux to disable the automatic mounting of the file system upon boot. Explain why it is important to boot Linux to the console mode and how to configure this change. Explain what acquisition options are available in LinEn. Understand how Linux names devices and partitions.
Understand why and how an EnCase boot disk is made. Know where the tools are located to create an EnCase boot disk. Be able to explain the steps involved in creating an EnCase boot disk and also how to update an EnCase boot disk with an updated version of LinEn. Explain how Linux achieves write blocking ...