Looking at the swap_digger tool to explore Linux artifacts

The swap_digger tool performs an automated analysis of the Linux swap file and can retrieve artifacts such as system passwords, usernames, and form credentials, and even Wi-Fi information such as SSIDs and perhaps even passwords if stored in the swap file.

Installing and using swap_digger

Follow these steps to install and use swap_digger for swap analysis:

1. Change directories to the desktop in the terminal and clone swap_digger to the desktop by typing the following:

   git clone https://github.com/sevagas/swap_digger.git

The following screenshot shows the output of the preceding command for installing swap_digger.

Figure 11.9 – Installing swap_digger

2. Change to the swap_digger directory by typing cd swap_digger and type the following command to ensure swap_digger will have the required access permissions:

   chmod +x swap_digger.sh

3. To view all swap_digger usage options...