{"product_id":"practical-linux-forensics","title":"Practical Linux Forensics","description":"\u003cp\u003e\u003ci\u003ePractical Linux Forensics\u003c\/i\u003e dives into the technical details of analyzing postmortem forensic images of Linux systems that have been misused, abused, or the target of malicious attacks. This essential practitioner’s guide will show you how to locate and interpret digital evidence found on Linux desktops, servers, and IoT devices, draw logical conclusions, and reconstruct timelines of past activity after a crime or security incident. It's a book written for investigators with varying levels of Linux experience, and the techniques shown are independent of the forensic analysis platform and tools used.\u003c\/p\u003e\u003cp\u003eEarly chapters provide an overview of digital forensics as well as an introduction to the Linux operating system and popular distributions. From there, the book describes the analysis of storage, filesystems, files and directories, installed software packages, and logs. Special focus is given to examining human user activity such as logins, desktop environments and artifacts, home directories, regional settings, and peripheral devices used.\u003c\/p\u003e\u003cp\u003e\u003cstrong\u003eYou’ll learn how to:\u003c\/strong\u003e\u003c\/p\u003e\u003cul\u003e\n\u003cli\u003eAnalyze partition tables, volume management, Linux filesystems, and directory layout\u003c\/li\u003e\n\u003cli\u003eReconstruct the Linux startup process, from system boot and kernel initialization, to systemd unit files leading up to a graphical login\u003c\/li\u003e\n\u003cli\u003ePerform historical analysis of power, temperature, and physical environment, and find evidence of sleep, hibernation, shutdowns, reboots, and crashes\u003c\/li\u003e\n\u003cli\u003eAnalyze network configuration, including interfaces, addresses, network managers, DNS, wireless artifacts, VPNs, firewalls, and proxy settings\u003c\/li\u003e\n\u003cli\u003ePerform analysis of time and locale settings, internationalization (language and keyboard settings), and Linux geolocation services\u003c\/li\u003e\n\u003cli\u003eReconstruct user login sessions, analyze desktop artifacts, and identify traces of attached peripheral devices, including disks, printers, and mobile devices\u003c\/li\u003e\n\u003c\/ul\u003e\u003ch3\u003eAbout the Author\u003c\/h3\u003e\u003cp\u003e\u003cb\u003eBruce Nikkel\u003c\/b\u003e is a professor at the Bern University of Applied Sciences in Switzerland, specializing in digital forensics and cybercrime. He is co-head of the university’s research institute for cybersecurity and engineering, and director of the Masters program in Digital Forensics and Cyber Investigation.In addition to his academic work, he has worked in risk and security departments at a global financial institution since 1997. He headed the bank's Cybercrime Intelligence \u0026amp; Forensic Investigation team for more than 15 years and currently works as an advisor. Bruce holds a PhD in network forensics, is the author of \u003ci\u003ePractical Forensic Imaging\u003c\/i\u003e (No Starch Press, 2016), and is an editor with Forensic Science International’s \u003ci\u003eDigital Investigation\u003c\/i\u003e journal. He has been a Unix and Linux enthusiast since the 1990s\u003cbr\u003e\u003c\/p\u003e\u003cp\u003e\u003cstrong\u003eTable of contents \u003c\/strong\u003e\u003c\/p\u003e\u003cp\u003e\u003cb\u003eIntroduction\u003c\/b\u003e \u003c\/p\u003e\u003cp\u003e\u003cb\u003eChapter 1:\u003c\/b\u003e Digital Forensics Overview \u003c\/p\u003e\u003cp\u003e\u003cb\u003eChapter 2:\u003c\/b\u003e Linux Overview \u003c\/p\u003e\u003cp\u003e\u003cb\u003eChapter 3:\u003c\/b\u003e Evidence from Storage Devices and Filesystems \u003c\/p\u003e\u003cp\u003e\u003cb\u003eChapter 4:\u003c\/b\u003e Directory Layout and Forensic Analysis of Linux Files \u003c\/p\u003e\u003cp\u003e\u003cb\u003eChapter 5:\u003c\/b\u003e Investigating Evidence from Linux Logs \u003c\/p\u003e\u003cp\u003e\u003cb\u003eChapter 6:\u003c\/b\u003e Reconstructing System Boot and Initialization \u003c\/p\u003e\u003cp\u003e\u003cb\u003eChapter 7:\u003c\/b\u003e Examination of Installed Software Packages \u003c\/p\u003e\u003cp\u003e\u003cb\u003eChapter 8:\u003c\/b\u003e Identifying Network Configuration Artifacts \u003c\/p\u003e\u003cp\u003e\u003cb\u003eChapter 9:\u003c\/b\u003e Forensic Analysis of Time and Location \u003c\/p\u003e\u003cp\u003e\u003cb\u003eChapter 10:\u003c\/b\u003e Reconstructing User Desktops and Login Activity \u003c\/p\u003e\u003cp\u003e\u003cb\u003eChapter 11:\u003c\/b\u003e Forensic Traces of Attached Peripheral Devices \u003c\/p\u003e\u003cp\u003e\u003cb\u003eAfterword\u003c\/b\u003e \u003c\/p\u003e\u003cp\u003e\u003cb\u003eAppendix A:\u003c\/b\u003e File and Directory List for Digital Investigators\u003c\/p\u003e","brand":"No Starch Press","offers":[{"title":"Paperback","offer_id":50506318970950,"sku":"9781718501966","price":4432.0,"currency_code":"INR","in_stock":true},{"title":"E-Book","offer_id":50506319003718,"sku":"9781718501966-2","price":4727.0,"currency_code":"INR","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0754\/2797\/1142\/files\/PracticalLinuxForensincs_cover.png?v=1790326696","url":"https:\/\/cb-india.com\/products\/practical-linux-forensics","provider":"Computer Bookshop (India) Pvt Ltd","version":"1.0","type":"link"}