Linux Basics

Before you can conduct forensics on a Linux machine, you need to have a basic understanding of how Linux works. Even if you have a good working knowledge of Linux, feel free to skim this section anyway because it provides a common background knowledge level for all learners.

Linux History

A good way to get an overview of Linux is to begin by studying the history of Linux. And the first, most important, thing to know about the history of Linux is that it is actually a clone of UNIX. That means that the history of Linux includes the history of UNIX. So, that is where this examination of Linux history begins: with the birth of UNIX.

The UNIX operating system was created at Bell Laboratories. Bell Labs is famous for a number of ...

Get System Forensics, Investigation, and Response, 3rd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.