DFSP # 397 - Linux Home Directory Files for DFIR

Published: Sept. 26, 2023, 4:27 a.m.

b"

This week I'm talking about the linux file system from the point of view of a forensic analyst. In general, it's a good idea to have a solid working knowledge of the linux file system so you understand what directories hold what artifacts\\u2026 Or if you're looking for a specific category of artifact, you at least have an idea of where you may find it. I will cover the home directory this week and breakdown the typical forensic artifacts you find there\\u2026\\u2026

"