From the course: Operating System Forensics
Join today to access over 25,200 courses taught by industry experts.
Linux hands-on
From the course: Operating System Forensics
Linux hands-on
- [Instructor] Let's try out some Linux commands to explore various inode details. Inodes are what Linux uses to store file or directory metadata. Each file or directory has a unique inode number. Let's see if this is true. Type ls -ai and press enter. This gives you a glimpse of the structure of a directory inode. The numeric values to the left hand side of the file and directory names are inode numbers. The first item in the listing is a number and a dot. One dot in Linux means the current directory. Therefore, the inode number for the current directory is 2752513. Two dots in Linux signifies the parent directory, and the number next to them here is its inode number. The rest is a list of inode number and file name pairs. That's it. It's that easy. The metadata items a directory inode contains are the mappings between inode numbers and the current directory, the parent directory and the files in the current directory. Let's now take a closer look at file inodes and their metadata…
Download courses and learn on the go
Watch courses on your mobile device without an internet connection. Download courses using your iOS or Android LinkedIn Learning app.