It isfocused on how to collect the evidences with the order of their volatility in a LINUX computerin this article.

• 本文所探讨的就是如何按照易失性顺序在LINUX系统中收集证据。