{'fraction_non_alphanumeric': 0.014166666666666666, 'fraction_numerical': 0.0016666666666666668, 'mean_word_length': 4.887254901960785, 'pattern_counts': {'":': 0, '<': 0, '<?xml version=': 0, '>': 0, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Design and Implementation of Forensics Process Workflow on Compromised Linux Based Systems

Today a diverse variety of devices like smart phones, tablets and IOT devices are being developed. Most of them are based on Linux based platform. Almost every website is deployed on Linux based server.Behind 90% of the websites and every IOT device the backend is Linux operating system. Linux is most popular for its presence in every organization’s server room.In case of an incident the probability of us encountering a Linux, system is likely very high. It is also very popular with black hat hackers. When an event occurs in an organization or a hacker attacks a system or server, to determine the methodologies used by that hacker and to know the identity of that hacker we need to perform digital forensics. Digital forensics is playing a crucial role in identifying the vulnerabilities and root causes of the incidents and also help us improve the defense strategies. But unfortunately, there is no standard procedure for implementing this forensic process especially on Linux systems. In this paper a workflow for investigation of Linux operating system running devices is designed and implemented.