Linux Forensics

Walkthrough summary

Linux Forensics TryHackMe walkthrough with 11 answered prompts and lab methodology notes.

Sample prompts covered

• Which two users are the members of the group audio?
  Open the walkthrough page to inspect the full answer and command flow.
• In the attached VM, there is a user account named tryhackme. What is the uid of this account?
  Open the walkthrough page to inspect the full answer and command flow.
• A session was started on this machine on Sat Apr 16 20:10. How long did this session last?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the hostname of the attached VM?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the timezone of the attached VM?
  Open the walkthrough page to inspect the full answer and command flow.