Operating System Forensics

Chapter 1

Forensics and Operating Systems

Abstract

This chapter describes the digital forensics with a specific focus on the growing need to understand the operating system details to be able to perform a forensic analysis. It also describes what an operating system is and why you need to understand the details of the operating systems to be effective.

Keywords

operating systems

forensics

operating environments

INFORMATION INCLUDED IN THIS CHAPTER:

• A definition of forensics

• Description of some relevant laws

• A definition of operating systems

• A description of operating environments and shells

Introduction

While my most interesting experience in the field of forensics was trying to determine whether a coworker had been viewing and making ...