Tags

Tags give the ability to mark specific points in history as being important

1.7

f8bc411e · Consistency when presenting options (artifacts) · May 16, 2025

- Typos in RPM verification
- Added examples for ss, unhide
- Additional kernel checks

1.6

4f9374b0 · fixed comment for vol command · Mar 17, 2025
```
Added volatility examples
```

1.5

6accb5f9 · Changed command for tracee to look for hidden modules · Feb 25, 2025

- Added more network tips, and removed some of the links (most of them are already available in the toolkit gitlab readme).
- Changed title to make obvious this is for Linux forensics
- Added parameter for tracee

1.4

5521ef9c · added instructions for building · Jan 21, 2025
```
Added extra example for docker containers
```

1.3

ad02fbf0 · Updated ftrace finding command · Dec 10, 2024

Added extended blocks for package (deb + RPM) analysis, live analysis and containers.

1.2

100f316e · corrected typos and added RPM section in second page · Nov 20, 2024
```
New release of the forensics cheatsheet using our cheatsheet builder.
```

1.7

1.6

1.5

1.4

1.3

1.2