Chapter 5

System Configuration

Abstract

This chapter provides an overview of configuration artifacts for Linux, Windows, and Mac OS including the Windows registry, Mac OS plists, and places where Linux has configuration files.

Keywords

operating systems
forensics
operating environments
configuration
windows registry
plists

INFORMATION INCLUDED IN THIS CHAPTER:

Windows registry
.inf files
Linux /etc directory
Mac OS plist files

Introduction

One advantage we are looking for now is the fact that system configuration has really settled down to some pretty specific areas. This has not always been the case. Windows, for example, generally has configuration details stored in the Windows registry. The registry, interestingly, was originally intended ...

Get Operating System Forensics now with the O’Reilly learning platform.

O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.