Forensics and Operating Systems
This chapter describes the digital forensics with a specific focus on the growing need to understand the operating system details to be able to perform a forensic analysis. It also describes what an operating system is and why you need to understand the details of the operating systems to be effective.
INFORMATION INCLUDED IN THIS CHAPTER:
• A definition of forensics
• Description of some relevant laws
• A definition of operating systems
• A description of operating environments and shells
While my most interesting experience in the field of forensics was trying to determine whether a coworker had been viewing and making ...