This book deals with topics in the field of forensic analysis of systems running on variants of the UNIX operating system, which is the choice of hackers for their attack platforms. companion DVD provides a simulated or "live" UNIX environment where readers can test the skills they have learned in this book and using special tools developed by the authors. The book begins with a chapter to explaining why and how this book was written, and to whom, and then immediately begin dealing with live response (volatile) data collection and analysis. The following chapters address / proc analysis, revealing many significant evidence, and analysis files created by or on UNIX systems. companion DVD provides a simulated or "live" UNIX environment where readers can test the skills they have learned in this book and using special tools developed by the authors. Throughout this book the author gives a lot of unique information, providing tools, techniques and information that will not be found elsewhere. Not only are the tools provided, but the author also provides sample files so that after completing a detailed walk-through, the reader can immediately practice newfound skills. * Partner DVD for this book contains significant, unique materials (movies, spreadsheet, code, etc.) are not available elsewhere. * This book contains information about UNIX forensic analysis that is unavailable elsewhere.