Summary
In the first chapter, we created our lab environment: a virtual machine running Ubuntu 14.04.2 LTS. This step is really important as you can now create snapshots before working on real evidence and are able to roll back to a clean machine state after finishing the investigation. This can be helpful, especially, when working with compromised system backups, where you want to be sure that your system is clean when working on a different case afterwards.
In the second part of this chapter, we demonstrated how to work with Python's virtual environments (virtualenv) that will be used and extended throughout the book.
In the last section of this chapter, we introduced the Python ctypes to you, which is a very powerful library available to the ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access