~/giac-glir · Linux File System Artifacts ▊
← GIAC Linux Incident Responder
GIAC · objective · 8% of the exam
Linux File System Artifacts
Exam objectives are the official skill domains GIAC Linux Incident Responder tests. Below are the official GIAC docs our questions on this objective cite — review them, then practise.
Sign in to track your progress on this objective.
Official references for this objective
-
Sans — FOR577: LINUX Incident Response and Threat Hunting | SANS Institute
how their superblock and inode structures, timestamps, and metadata can be interpreted with The Sleuth Kit or, where necessary, recovered by hand to reconstruct what