There are certain aspects to system administration that you can learn only from experience. Computer forensics (among other things the ability to piece together clues from a system to determine how an intruder broke in) can take years or even decades to master. If you have never conducted a forensics analysis on a computer, you might not even know exactly where to start. In this guide, I cover how to use the set of forensics tools in Sleuthkit with its Web front end, Autopsy, to organize your first forensics case. Computer forensics is a important skill for an Linux administrator. This article looks into what you need to know to investigate if your network have been attacked.

Read this full article at Linux Journal

Only registered users can write comments.
Please login or register.

Powered by AkoComment!