My process died… now what?
Linux forensics 101
Published in
5 min readJan 26, 2024
So… your program terminated and now you’re in charge of finding out what exactly happened. Before you decide to dive into the rabbit hole that is the source code, let’s first take a step back and treat the program as a black box.
What information can you get from a process that just terminated?