Linux Forensics and Why it’s Important

Why do we need to learn Linux forensics? Well, nowadays when you look at the number of tools available on different penetration testing systems running Linux, you should stop and ask yourself a basic question “are these tools and systems always going to be used for ethical purposes?” The answer is definitely, NO! Another reason to consider learning Linux forensics is that not everyone uses Windows. You may arrive at a crime scene only to find that your suspect’s computer is a Linux operating system! If you don’t have the proper skillset, you will be shocked and start to question your knowledge and abilities. What should I do? Do I have the skills required to collect data from this system? Where should I look for artifacts? What do these artifacts even look like? How can we identify and track user activity? etc. This session should help you answer most of those questions and get you started with Linux forensics.

Presented by:
Ali Hadi, Assistant Professor, Champlain College and Cybersecurity Researcher

NW3C does not share webinar attendees’ personally identifiable information with any third party without opt-in consent given during registration.

The views and opinions expressed in this presentation are those of the individual presenters and do not represent official policy, position, opinions, or views of NW3C.