Evidence: NFS Exports
Description: Collect NFS exports
Category: DiskFilesystem
Platform: linux
Short Name: nfsexpr
Is Parsed: Yes
Sent to Investigation Hub: Yes
Collect File(s): No
Background
This collector gathers NFS exports information from the Linux system. This data is essential for understanding network file sharing configuration, detecting unauthorized shares, and investigating data exposure risks.
Data Collected
This collector gathers structured data about nfs exports.
Collection Method
This collector parses NFS export configuration and records entries into the nfs_exports tables.
Forensic Value
This evidence is crucial for forensic investigations as it provides network file share visibility. It helps investigators identify exposed paths, client permissions, and misconfigurations that could lead to data leakage.
