Forensics and Operating Systems
This chapter describes the digital forensics with a specific focus on the growing need to understand the operating system details to be able to perform a forensic analysis. It also describes what an operating system is and why you need to understand the details of the operating systems to be effective.
INFORMATION INCLUDED IN THIS CHAPTER:
• A definition of forensics
• Description of some relevant laws
• A definition of operating systems
• A description of operating environments and shells
While my most interesting experience in the field of forensics was trying to determine whether a coworker had been viewing and making ...
Get Operating System Forensics now with the O’Reilly learning platform.
O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.