Chapter 5
System Configuration
Abstract
This chapter provides an overview of configuration artifacts for Linux, Windows, and Mac OS including the Windows registry, Mac OS plists, and places where Linux has configuration files.
Keywords
operating systems
forensics
operating environments
configuration
windows registry
plists
INFORMATION INCLUDED IN THIS CHAPTER:
• Windows registry
• .inf files
• Linux /etc directory
• Mac OS plist files
Introduction
One advantage we are looking for now is the fact that system configuration has really settled down to some pretty specific areas. This has not always been the case. Windows, for example, generally has configuration details stored in the Windows registry. The registry, interestingly, was originally intended ...
Get Operating System Forensics now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
