~/giac-glir · Linux Timeline Analysis ▊
← GIAC Linux Incident Responder
GIAC · objective · 7% of the exam
Linux Timeline Analysis — GIAC Linux Incident Responder
The official GIAC documentation our Linux Timeline Analysis practice questions are cited to. Review the primary sources, then practise.
Official references for this objective
-
Sans — FOR577: LINUX Incident Response and Threat Hunting | SANS Institute
including tampering with shell history, manipulating file timestamps with tools such as touch, and deleting evidence