9FORENSIC ANALYSIS OF TIME AND LOCATION
This chapter explains digital forensic concepts related to Linux time, regional settings, and location. Forensic timelines are explored, including how to build a forensic timeline from a Linux system. It also describes international configuration such as locale, keyboards, and languages. The final section covers geolocation technologies and reconstructing a Linux system’s geographic location history.
Linux Time Configuration Analysis
A large part of digital forensics is reconstructing past events. This digital archaeology depends on understanding concepts of time as applied to Linux environments.
Time Formats ...
Get Practical Linux Forensics now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
