GNU/Linux Examinations with AXIOM

In this talk we will explore Magnet AXIOM’s features useful to the Linux examiner. We will consider acquisitions, processing, and interactive examinations to leverage AXIOM’s various explorers for faster examinations, timeline analysis, artifact relationships, and more.

This session is perfect for those using Windows workstations for Linux evidence without missing Linux/UNIX-exclusive artifacts.