Get Discount 5% Off
Subscribe to our newsletters now and stay up-to-date with new arrivals, updates and deals.
Practical Linux Forensics: A Guide for Digital Investigators
A resource to help forensic investigators locate, analyze, and understand digital evidence found on modern Linux systems...
- CHF 78.49
- CHF 78.49
- Unit price
- per
SKU:
9781718501966
Product Type:
Books
Please hurry! Only 0 left in stock
10 customers are viewing this product
Couldn't load pickup availability
A resource to help forensic investigators locate, analyze, and understand digital evidence found on modern Linux systems after a crime, security incident or cyber attack. Practical Linux Forensics dives into the technical details of analyzing postmortem forensic images of Linux systems which have been misused, abused, or the target of malicious attacks. It helps forensic investigators locate and analyze digital evidence found on Linux desktops, servers, and IoT devices. Throughout the book, you learn how to identify digital artifacts which may be of interest to an investigation, draw logical conclusions, and reconstruct past activity from incidents. You'll learn how Linux works from a digital forensics and investigation perspective, and how to interpret evidence from Linux environments. The techniques shown are intended to be independent of the forensic analysis platforms and tools used. Learn how to: Extract evidence from storage devices and analyze partition tables, volume managers, popular Linux filesystems (Ext4, Btrfs, and Xfs), and encryption Investigate evidence from Linux logs, including traditional syslog, the systemd journal, kernel and audit logs, and logs from daemons and applications Reconstruct the Linux startup process, from boot loaders (UEFI and Grub) and kernel initialization, to systemd unit files and targets leading up to a graphical login Perform analysis of power, temperature, and the physical environment of a Linux machine, and find evidence of sleep, hibernation, shutdowns, reboots, and crashes Examine installed software, including distro installers, package formats, and package management systems from Debian, Fedora, SUSE, Arch, and other distros Perform analysis of time and Locale settings, internationalization including language and keyboard settings, and geolocation on a Linux system Reconstruct user login sessions (shell, X11 and Wayland), desktops (Gnome, KDE, and others) and analyze keyrings, wallets, trash cans, clipboards, thumbnails, recent files and other desktop artifacts Analyze network configuration, including interfaces, addresses, network managers, DNS, wireless artifacts (Wi-Fi, Bluetooth, WWAN), VPNs (including WireGuard), firewalls, and proxy settings Identify traces of attached peripheral devices (PCI, USB, Thunderbolt, Bluetooth) including external storage, cameras, and mobiles, and reconstruct printing and scanning activity
Author: Bruce Nikkel
Publisher: No Starch Press
Published: 12/21/2021
Pages: 400
Binding Type: Paperback
Weight: 1.65lbs
Size: 9.10h x 7.00w x 1.10d
ISBN: 9781718501966
About the Author
Bruce Nikkel is a professor at the Bern University of Applied Sciences in Switzerland, specializing in digital forensics and cybercrime. He is co-head of the university's research institute for cybersecurity and engineering, and director of the Masters program in Digital Forensics and Cyber Investigation. In addition to his academic work, he has worked in risk and security departments at a global financial institution since 1997. He headed the bank's Cybercrime Intelligence & Forensic Investigation team for more than 15 years and currently works as an advisor. Bruce holds a PhD in network forensics, is the author of Practical Forensic Imaging (No Starch Press, 2016), and is an editor with Forensic Science International's Digital Investigation journal. He has been a Unix and Linux enthusiast since the 1990s.
Author: Bruce Nikkel
Publisher: No Starch Press
Published: 12/21/2021
Pages: 400
Binding Type: Paperback
Weight: 1.65lbs
Size: 9.10h x 7.00w x 1.10d
ISBN: 9781718501966
About the Author
Bruce Nikkel is a professor at the Bern University of Applied Sciences in Switzerland, specializing in digital forensics and cybercrime. He is co-head of the university's research institute for cybersecurity and engineering, and director of the Masters program in Digital Forensics and Cyber Investigation. In addition to his academic work, he has worked in risk and security departments at a global financial institution since 1997. He headed the bank's Cybercrime Intelligence & Forensic Investigation team for more than 15 years and currently works as an advisor. Bruce holds a PhD in network forensics, is the author of Practical Forensic Imaging (No Starch Press, 2016), and is an editor with Forensic Science International's Digital Investigation journal. He has been a Unix and Linux enthusiast since the 1990s.
Returns Policy
You may return most new, unopened items within 30 days of delivery for a full refund. We'll also pay the return shipping costs if the return is a result of our error (you received an incorrect or defective item, etc.).
You should expect to receive your refund within four weeks of giving your package to the return shipper, however, in many cases you will receive a refund more quickly. This time period includes the transit time for us to receive your return from the shipper (5 to 10 business days), the time it takes us to process your return once we receive it (3 to 5 business days), and the time it takes your bank to process our refund request (5 to 10 business days).
If you need to return an item, simply login to your account, view the order using the "Complete Orders" link under the My Account menu and click the Return Item(s) button. We'll notify you via e-mail of your refund once we've received and processed the returned item.
Shipping
We can ship to virtually any address in the world. Note that there are restrictions on some products, and some products cannot be shipped to international destinations.
When you place an order, we will estimate shipping and delivery dates for you based on the availability of your items and the shipping options you choose. Depending on the shipping provider you choose, shipping date estimates may appear on the shipping quotes page.
Please also note that the shipping rates for many items we sell are weight-based. The weight of any such item can be found on its detail page. To reflect the policies of the shipping companies we use, all weights will be rounded up to the next full pound.
Related Products
Example product title
- CHF 78.49
- CHF 78.49
- Unit price
- per
Example product title
- CHF 78.49
- CHF 78.49
- Unit price
- per
Example product title
- CHF 78.49
- CHF 78.49
- Unit price
- per
Example product title
- CHF 78.49
- CHF 78.49
- Unit price
- per
Example product title
- CHF 78.49
- CHF 78.49
- Unit price
- per
Example product title
- CHF 78.49
- CHF 78.49
- Unit price
- per
Example product title
- CHF 78.49
- CHF 78.49
- Unit price
- per
Example product title
- CHF 78.49
- CHF 78.49
- Unit price
- per
Example product title
- CHF 78.49
- CHF 78.49
- Unit price
- per
Example product title
- CHF 78.49
- CHF 78.49
- Unit price
- per
Recently Viewed Products
Example product title
- CHF 78.49
- CHF 78.49
- Unit price
- per
Example product title
- CHF 78.49
- CHF 78.49
- Unit price
- per
Example product title
- CHF 78.49
- CHF 78.49
- Unit price
- per
Example product title
- CHF 78.49
- CHF 78.49
- Unit price
- per
Example product title
- CHF 78.49
- CHF 78.49
- Unit price
- per
Example product title
- CHF 78.49
- CHF 78.49
- Unit price
- per
Example product title
- CHF 78.49
- CHF 78.49
- Unit price
- per
Example product title
- CHF 78.49
- CHF 78.49
- Unit price
- per
Example product title
- CHF 78.49
- CHF 78.49
- Unit price
- per
Example product title
- CHF 78.49
- CHF 78.49
- Unit price
- per
- Choosing a selection results in a full page refresh.