Loading ...Understanding Forensics
Forensics is the art and science of applying computer science to aid the legal process. Linux journal has published a nice introduction to Forensics:
A break-in can happen to any system administrator. Find out how to use Autopsy and Sleuthkit to hit the ground running on your first forensics project.
There are certain aspects to system administration that you can learn only from experience. Computer forensics (among other things the ability to piece together clues from a system to determine how an intruder broke in) can take years or even decades to master. If you have never conducted a forensics analysis on a computer, you might not even know exactly where to start. In this guide, I cover how to use the set of forensics tools in Sleuthkit with its Web front end, Autopsy, to organize your first forensics case.
One of the most common scenarios in which you might want to use forensics tools on a system is the case of a break-in. If your system has been compromised, you must figure out how the attacker broke in so you can patch that security hole. Before you do anything, you need to make an important decision—do you plan to involve law enforcement and prosecute the attacker?
Want to stay up to date with the latest Linux tips, news and announcements? Subscribe to our free e-mail newsletter or RSS feed to get all updates.
You can Email this page to a friend.
You may also be interested in other helpful articles:
- Linux and Open Source Digital Forensics Tools / Software
- Understanding SELinux ( Security-Enhanced Linux )
- DTrace by Example: Solving a Real-World Problem
- OpenBSD - quick and dirty introduction
- MySQL book for beginner (novice) users
Leave a Reply
We encourage your comments, and suggestions. But please stay on topic, be polite, and avoid spam. Thank you very much for stopping by our site!
Tags: art and science, attacker, autopsy, computer forensics, computer science, intruder, law enforcement, Linux, scenarios, security hole, sleuthkit, system administration, system administrator
Recent Comments
Yesterday ~ 3 Comments
Yesterday ~ 1 Comment
Yesterday ~ 9 Comments
Yesterday ~ 13 Comments
Yesterday ~ 3 Comments