Practical Linux Forensics: A Guide for Digital Investigators - Paperback >
/ Practical Linux Forensics: A Guide for Digital Investigators - Paperback

Practical Linux Forensics: A Guide for Digital Investigators - Paperback

Regular price$59.99
/
(Tax included. Shipping calculated at checkout.)
✔ Authenticity Guaranteed — Verified Designer Goods
✔ 100% Money-Back Guarantee on Eligible Items
✔ Prices Displayed in Your Local Currency
✔ Final Price = No Surprise Import Fees
✔ Complimentary Insured Worldwide Shipping on Qualifying Orders
✔ Select Collector & Specialty Pieces May Require Secured Delivery Handling
Our authentication process ensures every item meets strict luxury verification standards. Learn more
Complimentary worldwide shipping on qualifying orders

by Bruce Nikkel (Author)

A resource to help forensic investigators locate, analyze, and understand digital evidence found on modern Linux systems after a crime, security incident or cyber attack.

Practical Linux Forensics dives into the technical details of analyzing postmortem forensic images of Linux systems which have been misused, abused, or the target of malicious attacks. It helps forensic investigators locate and analyze digital evidence found on Linux desktops, servers, and IoT devices. Throughout the book, you learn how to identify digital artifacts which may be of interest to an investigation, draw logical conclusions, and reconstruct past activity from incidents. You'll learn how Linux works from a digital forensics and investigation perspective, and how to interpret evidence from Linux environments. The techniques shown are intended to be independent of the forensic analysis platforms and tools used.

Learn how to:

  • Extract evidence from storage devices and analyze partition tables, volume managers, popular Linux filesystems (Ext4, Btrfs, and Xfs), and encryption
  • Investigate evidence from Linux logs, including traditional syslog, the systemd journal, kernel and audit logs, and logs from daemons and applications
  • Reconstruct the Linux startup process, from boot loaders (UEFI and Grub) and kernel initialization, to systemd unit files and targets leading up to a graphical login
  • Perform analysis of power, temperature, and the physical environment of a Linux machine, and find evidence of sleep, hibernation, shutdowns, reboots, and crashes
  • Examine installed software, including distro installers, package formats, and package management systems from Debian, Fedora, SUSE, Arch, and other distros
  • Perform analysis of time and Locale settings, internationalization including language and keyboard settings, and geolocation on a Linux system
  • Reconstruct user login sessions (shell, X11 and Wayland), desktops (Gnome, KDE, and others) and analyze keyrings, wallets, trash cans, clipboards, thumbnails, recent files and other desktop artifacts
  • Analyze network configuration, including interfaces, addresses, network managers, DNS, wireless artifacts (Wi-Fi, Bluetooth, WWAN), VPNs (including WireGuard), firewalls, and proxy settings
  • Identify traces of attached peripheral devices (PCI, USB, Thunderbolt, Bluetooth) including external storage, cameras, and mobiles, and reconstruct printing and scanning activity

  • Author Biography

    Bruce Nikkel is a professor at the Bern University of Applied Sciences in Switzerland, specializing in digital forensics and cybercrime. He is co-head of the university's research institute for cybersecurity and engineering, and director of the Masters program in Digital Forensics and Cyber Investigation. In addition to his academic work, he has worked in risk and security departments at a global financial institution since 1997. He headed the bank's Cybercrime Intelligence & Forensic Investigation team for more than 15 years and currently works as an advisor. Bruce holds a PhD in network forensics, is the author of Practical Forensic Imaging (No Starch Press, 2016), and is an editor with Forensic Science International's Digital Investigation journal. He has been a Unix and Linux enthusiast since the 1990s.

    Number of Pages: 400
    Dimensions: 1.1 x 9.1 x 7 IN
    Publication Date: December 21, 2021
    • In stock, ready to ship
    • Backordered, shipping soon
    Shop with Confidence
    • ✔ Authenticity Guaranteed — Verified Designer Goods
    • ✔ Sourced from Authorized European/U.S. Luxury Distributors
    • ✔ Secure Checkout — SSL Encrypted Payments
    • ✔ Fast Global Delivery — 3–11 Business Days
    • ✔ Easy Returns on Eligible Items
    • ✔ 100% Money-Back Guarantee — Full Refund if Not Satisfied
    Verified Trust Rating: 91/100
    Amazon American Express Apple Pay Bancontact Diners Club Discover Google Pay Mastercard PayPal Shop Pay USDC Visa SSL Secure
    Amazon Pay Logo Fast checkout with Amazon Pay. Use your Amazon account to skip entering shipping or card info.
    Trusted by discerning buyers worldwide — secure, verified luxury sourcing

    AUTHENTICITY GUARANTEED

    Reserved for you — complete your purchase to secure this piece.

    Authorized Designer Inventory Secure & Encrypted Checkout Tracked & Insured Delivery

    OFFICIALLY AUTHORIZED RESELLER

    Discover Officially Authorized Authentic Items at STORE7994.com - Certificates Available on Request!

    Independently verified for store quality and customer safety.
    Trust score: 91/100

    All designer items offered by STORE 7994 are sourced from trusted luxury distributors and verified through independent authentication services.

    Learn how STORE 7994 authenticates luxury items

    Guaranteed Authentic — Includes Brand Documentation & Third-Party Verification Options.

    Shipping information

    • Free Shipping* on all orders over $300 USD to most countries* Estimated delivery: 2-5 business days Mon-Sat to U.S., CA, EU etc.
    • Tracking available: DHL Express
    • Store 7994 Shipping policy
    • Global delivery in 3–9 business days (location dependent).
    • Free Worldwide Shipping $300+. International duties & VAT are calculated by destination country and may be collected upon delivery. UK orders are subject to 20% import VAT upon delivery.

    Our innovation isn’t just in the brands we carry — it’s in the way we connect them. From our automation engine that keeps collections globally updated to our commitment to authenticity-first presentation, STORE 7994 exists where timeless design meets modern precision.

    Every product we offer is:
    Elevated · Intentional · Exclusive · Authentic

    STORE 7994 is an authorized reseller of luxury fashion houses. Certificates and proof of authenticity are available to brand owners and partners upon request.

    This site is protected by hCaptcha and the hCaptcha Privacy Policy and Terms of Service apply.

    Returns & Refunds

    We want you to shop with confidence at STORE 7994. If your purchase does not meet expectations, eligible items may be returned under the conditions below.

    Return Eligibility
    Items must be unused, unworn, and in original condition with all tags, packaging, and accessories included. Items showing any signs of wear or damage will not be accepted.

    Return Window
    Return requests must be made within 14 days of delivery.

    Return Shipping
    Customers are responsible for return shipping costs unless the item is defective, damaged, or incorrect.

    Luxury Items
    Items valued over $1,000 may be subject to a 7% restocking fee upon approved return.

    Non-Returnable Items
    For hygiene and product integrity reasons, the following items are final sale once opened or used:

    • Underwear
    • Fragrances
    • Any worn or used items

    Made-to-Order Items
    Custom-designed products, including STORE 7994 hoodies, are made exclusively for each customer and are final sale. These items are not eligible for return or exchange unless defective or incorrect.

    If you receive a defective or incorrect item, please contact us and we will make it right.

    International Shipping & Duties
    Many of our products ship directly from trusted international partners. Any applicable customs duties or import taxes are calculated at checkout and are non-refundable, even if the item is returned.

    Returns & Associated Fees
    All approved returns are subject to a $24 return processing fee. For international orders, duties, taxes, and return fees will be deducted from the original payment.

    Shipping Policy
    Complimentary shipping is offered on orders over $300. Orders below this threshold are subject to standard shipping rates at checkout.