View source for Linux Forensics Workshop

From BruCON 2017

You do not have permission to edit this page, for the following reason:

The action you have requested is limited to users in the group: Users.

You can view and copy the source of this page.

This hands-on workshop is a rapid introduction to key artefacts and techniques for investigating compromised Linux systems using Linux tools.  Part 1 covers collecting and analyzing disk and
memory evidence, showing you where to look and introducing tools every investigator should know.  Part 2 is a deep-dive into the Linux EXT file system family, including recovery of deleted data and data from damaged file systems.

Return to Linux Forensics Workshop.

Retrieved from "https://2017.brucon.org/index.php/Linux_Forensics_Workshop"

navigation

SEARCH

TOOLBOX

LANGUAGES

View source for Linux Forensics Workshop

From BruCON 2017