07 Jul S Operating Systems For Forensic Invest
SSC351 APUS Operating Systems For Forensic Investigation Discussion
All interaction on Studypool is 100% anonymous. Username has been changed to protect this user’s privacy
Anonymous
label
Programming
timer
Asked: Apr 12th, 2019
account_balance_wallet
$10
Question Description
Need two 100 words discussion responses for the following student discussions. Below in bold will the questions the students are answering.
Questions:
The Linux Operating System is becoming more popular every day due to its cost and availability. As in any operating system investigation, there are certain things that the investigator must look for, discuss these files and logs.
How would you conduct an investigation of a Linux system?
Apple Macintosh Operating System is also one of the top operating systems used. It differs from all of the other operating systems in many ways. Discuss how you would investigate an apple system, discuss the tools used and the files, logs and file systems.
Student one:
Greetings Class,
Conducting an investigation on any operating system requires due diligence in order to preserve the integrity of the evidence being evaluated. Therefore, to properly accomplish this a forensics copy must be made so the investigation can take place on the copy opposed to the original. In Linux, and other Unix based operating systems, a copy can be conducted directly from the shell with the command “dd”. Other beneficial commands that could be used directly from the shell are the “ps” command which will show all current running processes for the user logged in, and the “who” command which will identify the user(s) currently logged on the system.
Linux, like any other operating system contains areas of interest to forensics investigators that can help piece back a picture of what the device was being used for. Important areas of interest include the directories and logs which can be accessed directly through shell commands. One of the first logs of interest is the “/var/log/faillog” log which shows if and how many fail attempts in logging into the device. This can be beneficial in the case you are determining if the device was hacked or not. The “/var/log/mail.*” log will show data associated with the mail server which can contain incriminating evidence from messages sent or received from the device. Additionally the directories can contain valuable information when conducting ones investigation. To name a few, the “/root” directory contains user information for the root users which is usually the administrator and the “/usr” directory shows subdirectories for individual users
Apple utilizes an operating system that is based off of FreeBSD which is a Unix clone. Therefore investigators can utilize the same shell commands to work in the terminal and make a clone of the disk by using the “dd” command. Another benefit for investigators is that Apple has a “Target Disk Mode” which can be activated to prevent the disk being written to prior to making a disk image. Additionally you can view live running processes prior to shutdown without compromising the evidence. And just like Linux, the terminal can be used to extract information swap file, users logs, and other areas within the directory.
Our website has a team of professional writers who can help you write any of your homework. They will write your papers from scratch. We also have a team of editors just to make sure all papers are of HIGH QUALITY & PLAGIARISM FREE. To make an Order you only need to click Ask A Question and we will direct you to our Order Page at WriteDemy. Then fill Our Order Form with all your assignment instructions. Select your deadline and pay for your paper. You will get it few hours before your set deadline.
Fill in all the assignment paper details that are required in the order form with the standard information being the page count, deadline, academic level and type of paper. It is advisable to have this information at hand so that you can quickly fill in the necessary information needed in the form for the essay writer to be immediately assigned to your writing project. Make payment for the custom essay order to enable us to assign a suitable writer to your order. Payments are made through Paypal on a secured billing page. Finally, sit back and relax.
About Wridemy
We are a professional paper writing website. If you have searched a question and bumped into our website just know you are in the right place to get help in your coursework. We offer HIGH QUALITY & PLAGIARISM FREE Papers.
How It Works
To make an Order you only need to click on “Order Now” and we will direct you to our Order Page. Fill Our Order Form with all your assignment instructions. Select your deadline and pay for your paper. You will get it few hours before your set deadline.
Are there Discounts?
All new clients are eligible for 20% off in their first Order. Our payment method is safe and secure.