Chapter 1

Forensics and Operating Systems

Abstract

This chapter describes the digital forensics with a specific focus on the growing need to understand the operating system details to be able to perform a forensic analysis. It also describes what an operating system is and why you need to understand the details of the operating systems to be effective.

Keywords

operating systems
forensics
operating environments

INFORMATION INCLUDED IN THIS CHAPTER:

A definition of forensics
Description of some relevant laws
A definition of operating systems
A description of operating environments and shells

Introduction

While my most interesting experience in the field of forensics was trying to determine whether a coworker had been viewing and making ...

Get Operating System Forensics now with the O’Reilly learning platform.

O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.