# Digital Forensics Readiness in Big Data Networks:
## 7 Conclusions  
In this study, the proposed framework and IR-Script effectively address the challenge of gathering essential supporting evidential information for digital forensics investigations in Linux-Hadoop environments. Traditionally, this process is manual, time-consuming, and prone to errors, requiring significant expertise in both Linux and Hadoop systems. The IR-Script was evaluated across three different Linux-Hadoop environments: AWS with Ubuntu Linux, Oracle VB with CentOS, and HDP sandbox with CentOS. It successfully collected and organised a comprehensive system and Hadoop-specific information in the \begin{table}
\begin{tabular}{c c c c c c} \hline \hline
**IR-Script** & & & **Oracle** & **HDP** & **Results** \\
**Generated Files** & & & **VB** & **Sandbox** & **Summary** \\ \hline \multirow{6}{*}{OS\_Info.txt} & 1. & Operating System Details & & & \\  & 2. & Users with Sudo Privileges & 1. Yes & 1. Yes & 1. Yes & In total, 10/11 \\  & 3. & Logged-In Users & 2. Yes & 2. Yes & 2. Yes & instances of the \\  & 4. & Uptime and Load Averages & 3. Yes & 3. Yes & 3. Yes & supporting OS \\  & 5. & Disc Usage and Partition & 4. Yes & 4. Yes & 4. Yes & information in \\  & & Information & 5. Yes & 5. Yes & 5. Yes & both the tct \\  & 6. & Mount Points and Filesystem & 6. Yes & 6. Yes & 6. Yes & and CSV \\ OS\_Info.csv & & Config & 7. Yes & 7. Yes & 7. Yes & fortracts were \\  & 7. & Network Configuration & 8. Yes & 8. Yes & 8. Yes & three testbeds. \\  & 8. & Default Linux Log File List & 9. Yes & 9. Yes & 9. Yes & More details in \\  & 9. & Promiscuous Mode Check & 10. Partial & 10. Partial & 10. No & conclusion \\  & 10. & Detect IDS and Check Logs & 11. Yes & 11. Yes & 11. Yes & Section. \\  & 11. & Check for Rootkits & & & & \\ \hline \multirow{6}{*}{Hadoop\_Info.csv} & 1. & Hadoop Configuration Files & & & \\  & 2. & HDFS Version & & & \\  & 3. & NameNodes and Secondary & & & \\  & & NameNodes & 1. Yes & 1. Yes & 1. No & \\  & 4. & Default Hadoop Log File List & 2. Yes & 2. Yes & 2. Yes & All of the artefacts \\  & 5. & Hadoop Cluster Network & 3. Yes & 3. Yes & 3. Yes & were retrieved for \\ Hadoop\_Info.txt & & Config & 4. Yes & 4. Yes & 4. No & AWS and \\ Hadoop\_Info.csv & 6. & Cluster Environment Variables & 5. Yes & 5. Yes & 5. Yes & Oracle VB. \\  & Config & 6. Yes & 6. Yes & 6. Yes & However, 7/9 \\  & 7. & Detailed Hadoop Cluster & 7. Yes & 7. Yes & 7. Yes & were retrieved for \\  & Info/Metrics & 8. Yes & 8. Yes & 8. Yes & HDP sandbox. \\  & 8. & Current Running Hadoop & 9. Yes & 9. Yes & 9. Partial & \\  & Processes & & & & \\  & 9. & Hadoop Cluster Nodes & & & \\ \hline \multirow{2}{*}{Script\_Log.txt} & \multirow{2}{*}{Time-Stamped Script Operations} & \multirow{2}{*}{Yes} & \multirow{2}{*}{Yes} & \multirow{2}{*}{Time-stamped log} \\  & & Account & & & \\ \hline \hline \end{tabular}
\end{table} 
Table 1: Functional evaluation results. AWS and Oracle VB environments. However, in the HDP sandbox, the script encountered difficulties retrieving Hadoop configuration files, Hadoop log directories, and Hadoop data nodes. These issues were primarily related to error messages about superuser privileges, suggesting that the test environment's configuration or privilege management may have contributed to these retrieval failures. Despite these limitations, the script's thorough documentation and well-organised output, combined with its CLI-based design, significantly enhance its usability. The IDS check results were inconclusive, as no IDS were installed in the test environments, which was outside the scope of this research. Future work will focus on the following:  
* Extended Testing: A prototype and evaluation of the proposed conceptual DFR framework for big data networks. Additionally, the further evaluation of IR-script on additional Linux distributions to ensure its robustness and adaptability across a wider range of environments. * AI Integration: Incorporating AI to enhance the script's capabilities, potentially improving its adaptability and accuracy in diverse scenarios.