FILE/DIRECTORY LIST FOR DIGITAL INVESTIGATORS
This appendix contains a list of common files and directories found on popular Linux systems together with a description for digital forensic investigators.
Files and directories found in most Linux systems are described in two man pages: hier(7) and file-hierarchy(7). Depending on the Linux distro, local custom configuration, and installed packages, some files listed in this document may or may not exist on the forensic image you are analyzing. If you are aware of additional files that would be interesting from an investigative or forensics perspective, please email me at nikkel@digitalforensics.ch ...
Get Practical Linux Forensics now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
