Linux Forensics

How to see inode usage

Linux file systems use inodes, unique references to link to a file or directory. Learn how to see inode usage on a Linux file system or mount point.

How to see used and free disk space

Learn how to see used and remaining disk space on Linux systems by gathering the statistics of file systems and mount points using the df command.

How to find symbolic links that point to a directory

Symbolic links may point to a directory or a file. Learn how to use the find command to discover symbolic links that refer to a directory.

How to compare two directories and find the differences

Learn how to compare two directories on a Linux systems and see their differences between both or what files they are having in common.

How to securely delete a file and its contents

Need to delete the contents of a sensitive file on Linux? Instead of just deleting it with rm, have a look at some other options for a more secure deletion.

How to see the creation date of a file

Linux may store the initial creation of a file. Learn how to use the stat command to find this initial creation time of a file, also known as its birth time.