null
Loading…
Skip to main content

Holiday gifts by Fri, Dec 18? Order by Fri, Dec 4. Plan gifts

Free shipping works great on most orders over $95 in the contiguous US

Specialists Mon–Fri, 8:30 am–5 pm PTSpecialists Mon–Fri, 8:30–5 PT866-522-6657

Practical Linux Forensics: A Guide for Digital Investigators book cover by Bruce Nikkel
Paperback

Practical Linux Forensics: A Guide for Digital Investigators

by Bruce Nikkel

$37.19 / copy at 25+ copies As low as $30.00 at 1,000+Your best volume price

Paperback · 400 pages No Starch Press · 2021

Format

Paperback
Volume pricing

The more copies, the less each one costs

Applied automatically in your cart. No code needed.

More than a box of books

Turn this order into a program

Groups that order in bulk often pair the copies with something more. We handle the extras so you don't have to.

About the book

Practical Linux Forensics

A resource to help forensic investigators locate, analyze, and understand digital evidence found on modern Linux systems after a crime, security incident or cyber attack.

Practical Linux Forensics dives into the technical details of analyzing postmortem forensic images of Linux systems which have been misused, abused, or the target of malicious attacks. It helps forensic investigators locate and analyze digital evidence found on Linux desktops, servers, and IoT devices. Throughout the book, you learn how to identify digital artifacts which may be of interest to an investigation, draw logical conclusions, and reconstruct past activity from incidents. You’ll learn how Linux works from a digital forensics and investigation perspective, and how to interpret evidence from Linux environments. The techniques shown are intended to be independent of the forensic analysis platforms and tools used.

Learn how to:




  • Extract evidence from storage devices and analyze partition tables, volume managers, popular Linux filesystems (Ext4, Btrfs, and Xfs), and encryption
  • Investigate evidence from Linux logs, including traditional syslog, the systemd journal, kernel and audit logs, and logs from daemons and applications
  • Reconstruct the Linux startup process, from boot loaders (UEFI and Grub) and kernel initialization, to systemd unit files and targets leading up to a graphical login
  • Perform analysis of power, temperature, and the physical environment of a Linux machine, and find evidence of sleep, hibernation, shutdowns, reboots, and crashes
  • Examine installed software, including distro installers, package formats, and package management systems from Debian, Fedora, SUSE, Arch, and other distros
  • Perform analysis of time and Locale settings, internationalization including language and keyboard settings, and geolocation on a Linux system
  • Reconstruct user login sessions (shell, X11 and Wayland), desktops (Gnome, KDE, and others) and analyze keyrings, wallets, trash cans, clipboards, thumbnails, recent files and other desktop artifacts
  • Analyze network configuration, including interfaces, addresses, network managers, DNS, wireless artifacts (Wi-Fi, Bluetooth, WWAN), VPNs (including WireGuard), firewalls, and proxy settings
  • Identify traces of attached peripheral devices (PCI, USB, Thunderbolt, Bluetooth) including external storage, cameras, and mobiles, and reconstruct printing and scanning activity
  •  
     

    The book, Practical Linux Forensics: A Guide for Digital Investigators [Bulk, Wholesale, Quantity] ISBN#9781718501966 in Paperback by Bruce Nikkel may be ordered in bulk quantities. Minimum starts at 25 copies. Availability based on publisher status and quantity being ordered.

    Details

    Publisher
    No Starch Press
    Author
    Bruce Nikkel
    Format
    Paperback
    Published
    Dec 21, 2021
    ISBN-13
    9781718501966
    ISBN-10
    171850196X
    Pages
    400
    Carton quantity
    16 copies
    Buying for a group

    Practical Linux Forensics in bulk: pricing

    Volume pricing applies automatically in your cart. No codes, no account needed.

    CopiesPrice per copyYou save
    25 – 99 $37.19 38% off list
    100 – 249 $34.79 42% off list
    250 – 499 $32.39 46% off list
    500 – 999 $31.19 48% off list
    1,000+ $30.00 50% off list
    Ways groups use it

    Popular for

    1
    Book clubs

    A copy for every member, on one order.

    2
    Events and conferences

    A book for every attendee, delivered to your venue.

    3
    Gifts

    For clients, staff, members or volunteers.

    How fast can I get copies of Practical Linux Forensics?

    Need them by a specific date? Request a quote and we'll confirm timing before you pay.

    Can you ship to several locations or people's homes?

    Yes. We ship in bulk to one address, to multiple sites, or to individual recipients, in the US and internationally. See fulfillment options.

    Can I get a formal quote for approval before ordering?

    Yes. Request a quote and we'll send a PDF you can forward for approval.

    Do you accept purchase orders and tax-exempt orders?

    Yes. We accept purchase orders upon approval, as well as cards, PayPal, ACH, wire transfers and checks. BookPal is a tax-exempt supplier in all 50 states. See purchase orders and sales tax exemption.

    What if I find a lower price?

    Send us the link. We match prices from other bulk booksellers and distributors on a new copy in the same edition, available to ship in the quantity you need. Clearance sales and pricing errors are the exception, and we'll tell you quickly if that's the case. Start a price match.

    Customer reviews

    What buyers say

    Be the first to review
    Send for approval

    Get a yes from your approver

    Practical Linux Forensics: A Guide for Digital Investigators
    Email it to my approver

    Your approver gets a link to this page with the quantity set and an "Approve and order" button. Nothing is sent until you press send in your email app.

    Log In
    Review Your Cart
    Your cart is empty Your cart is empty Your cart is empty

    Menu

    Recently Viewed Recently Viewed
    Back to top Back to top