> For the complete documentation index, see [llms.txt](https://linux.inishantgrover.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://linux.inishantgrover.com/linux-home.md).

# Linux Home:

### Determine if its Debian/RedHat

Command `which rpm` OR `which dpkg`

If nothing above returns the result, run following: `cat /etc/os-release | grep -E '^NAME=|PRETTY_NAME='`

### Get Hostname

`cat /etc/hostname`

### Get System timezone:

`cat /etc/timezone`

Get OS Version: `cat /etc/os-release`

Get OS details.  `uname -a` and `lsb_release -a`

Get Env Variables: The $PATH displays a list of directories that tells the shell which directories to search for executable files, in order to check for directories that are in your path you can use.:

`echo $PATH`

Now towards:

1. [User Artifacts](/user-artifacts.md)
2. [Persistence](/persistence.md)
3. [System & File Artifacts](/system-and-file-artifacts.md)
4. [Process Artifacts](/process-artifacts.md)
5. [Network Artifacts](/network-artifacts.md)
6. [Linux Memory Collection](/linux-memory-collection.md)
7. [Application Logs](/application-logs.md)
8. [Investigating Rootkits](/investigating-rootkits.md)
9. [Collection Scripts](/collection-scripts.md)

**References:**

1. <https://tho-le.medium.com/linux-forensics-some-useful-artifacts-74497dca1ab2>
2. <https://library.mosse-institute.com/cyber-domains/digital-forensics.html#linux-forensics>
3. <https://www.halkynconsulting.co.uk/a/2020/11/linux-dfir-workflow-for-a-busy-responder/>