Encase support of l...
 
Notifications
Clear all

Encase support of linux memory and timeline analysis

1 Posts
1 Users
0 Reactions
2,369 Views
(@afsfr)
Eminent Member
Joined: 7 years ago
Posts: 37
Topic starter  

Does Encase support analysis of Redhat Linux image for memory voliatility and timeline generation. any specific enscript we can use for Linux timeline (file system mac date+parsing /var/log/security,audit,apache log)

can linux image be mounted in Encase workstation (windows 10) and can we check unsequential inodes as well as boot history in Encase? 


   
Quote
Share: