Section 3: Linux Forensic Analysis
This section will focus on aspects of Linux memory acquisition and analysis. The tracking of user actions and the detection and analysis of malware from a Linux forensics perspective will be covered in detail.
This section of the book comprises the following chapters:
- Chapter 7, Linux Memory Acquisition
- Chapter 8, User Activity Reconstruction
- Chapter 9, Malicious Activity Detection