Attached Files:


There are many different OSes (Operating Systems) in use today on different types of devices. From the basic computer where a user will have to carry out daily tasks, or specialized systems or embedded systems where the profile of the OS is quite small. Using the basic commands used in an OS can be helpful to develop evidence or leads in a case and are tools in the toolbox of the forensic investigator.

In the last module, the lab was focused on a Windows-based OS and using tools to discover artifacts that can be used as evidence or help to develop leads for the lead investigators. These artifacts can be used in cases to follow up on and either confirm or exclude evidence from the case. In this lab, you will work with the Linux OS to learn how to discover information about the system and users who were using it. Keep in mind there are many distributions (versions) of the OS, but in general, many of the commands operate the same.