Computer Forensics: Incident Response Essentials

Appendix C. How to Become A Unix Guru

It would be best if all forensic examiners had years of experience on the platform they will be investigating, but unfortunately, not enough people are available. If you don’t know Unix well, but expect increased opportunity if you learn more about it, go for it. Devote serious study and practice time, and you quickly can learn a useful level of knowledge about Unix. Unix is an excellent learning environment. Heavily documented and with source code available for study—what you learn about operating systems in Unix is applicable to Windows NT and even future environments.

First, we suggest you use Unix on a daily basis—you can’t learn it if you don’t use it, and the best way to use it is to force yourself ...