Operating System Forensics

The overwhelming majority of computers and devices encountered in an investigation run a general-purpose operating system (OS). The term device can be used in many ways, but in this section we will use it to refer to a type of hardware that is intended to carry out a limited range of functions. A device could be a router, a network storage unit, a camera, or a diverter to route packages along a conveyor system in a warehouse. Most complex devices run an OS that is similar to general-purpose computers. Other special-purpose devices, like the diverter, may not have an OS at all but have just its instructions, called firmware, stored in an onboard chip. The term firmware indicates that software is stored directly in the ...

Get Fundamentals of Information Systems Security, 4th Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.