Finding the data that you need for an investigation can be challenging even when you’re familiar with the operating system. However if you’re new to or just getting started with investigations on Linux systems, performing an examination on one could be even more daunting.