Forensic computer

Forensics is the set of techniques that allows us to obtain as much information as possible after a computer incident or crime. In this practice, you will perform the evidence-taking and analysis phase on one Linux machine and another Windows. We’ll assume we caught the criminal ‘in fraganti’ and the machines were on. Optionally, you can perform an Android device analysis. On each of the machines you must do a memory and a hard drive, taking the necessary measures to certify the chain of custody.