SUMMARY

We have covered a lot of ground in this book. I hope you have enjoyed the journey. We have laid a foundation that should help you perform investigations of Linux systems. What may not be immediately apparent is that by learning how to do forensics in Linux, you have also learned a considerable amount about how to investigate Windows systems on a Linux-based forensics workstation as well. That is the subject for another book. Until then, so long for now, and enjoy your Linux investigations.