For Linux Artifacts: Targeted Locations Quick Reference Guide
Finding the data that you need for an investigation can be challenging even when you’re familiar with the operating system. However if you’re new to or just getting started with investigations on Linux systems, performing an examination on one could be even more daunting.
Don’t worry.
We’ve put together this curated list of common locations on Linux systems that you can search to quickly find artifacts that may help you move your investigation along.