This chapter provides an overview of configuration artifacts for Linux, Windows, and Mac OS including the Windows registry, Mac OS plists, and places where Linux has configuration files.
INFORMATION INCLUDED IN THIS CHAPTER:
• Windows registry
• .inf files
• Linux /etc directory
• Mac OS plist files
One advantage we are looking for now is the fact that system configuration has really settled down to some pretty specific areas. This has not always been the case. Windows, for example, generally has configuration details stored in the Windows registry. The registry, interestingly, was originally intended ...
Get Operating System Forensics now with the O’Reilly learning platform.
O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.