Purchase textbook

The Basics of Digital Forensics,

Edition 1 The Primer for Getting Started in Digital Forensics

Editors: By John Sammons

Publication Date: 24 Feb 2012

Educator ancillaries

0 Reviews

Note

This product relies on 3rd party tooling which may impact the accessibility features visible in inspection copies. All accessibility features mentioned would be present in the purchased version of the title.

The Basics of Digital Forensics provides a foundation for people new to the field of digital forensics. This book teaches you how to conduct examinations by explaining what digital forensics is, the methodologies used, key technical concepts and the tools needed to perform examinations. Details on digital forensics for computers, networks, cell phones, GPS, the cloud, and Internet are discussed. Readers will also learn how to collect evidence, document the scene, and recover deleted data. This is the only resource your students need to get a jump-start into digital forensics investigations.

This book is organized into 11 chapters. After an introduction to the basics of digital forensics, the book proceeds with a discussion of key technical concepts. Succeeding chapters cover labs and tools; collecting evidence; Windows system artifacts; anti-forensics; Internet and email; network forensics; and mobile device forensics. The book concludes by outlining challenges and concerns associated with digital forensics. PowerPoint lecture slides are also available.

This book will be a valuable resource for entry-level digital forensics professionals as well as those in complimentary fields including law enforcement, legal, and general information security.

Key Features

Learn all about what Digital Forensics entails
Build a toolkit and prepare an investigative plan
Understand the common artifacts to look for during an exam

About the author

By John Sammons, Assistant Professor, Department of Integrated Science and Technology, Marshall University in Huntington, West Virginia

Dedication

Preface

Acknowledgments

About the Author

About the Technical Editor

Chapter 1. Introduction

Introduction

What is Forensic Science?

What is Digital Forensics?

Uses of Digital Forensics

Locard's Exchange Principle

Scientific Method

Organizations of Note

Role of the Forensic Examiner in the Judicial System

Summary

REFERENCES

Chapter 2. Key Technical Concepts

Introduction

Bits, Bytes, and Numbering Schemes

File Extensions and File Signatures

Storage and Memory

Computing Environments

Data Types

File Systems

Allocated and Unallocated Space

How Magnetic Hard Drives Store Data

Basic Computer Function—Putting it All Together

Summary

REFERENCES

Chapter 3. Labs and Tools

Introduction

Forensic Laboratories

Policies and Procedures

Quality Assurance

Digital Forensic Tools

Accreditation

Summary

REFERENCES

Chapter 4. Collecting Evidence

Introduction

Crime Scenes and Collecting Evidence

Documenting the Scene

Chain of Custody

Cloning

Live System versus Dead System

Hashing

Final Report

Summary

REFERENCES

Chapter 5. Windows System Artifacts

Introduction

Deleted Data

Hibernation File (Hiberfile.Sys)

Registry

Print Spooling

Recycle Bin

Metadata

Thumbnail Cache

Most Recently Used (MRU)

Restore Points and Shadow Copy

Prefetch

Link Files

Summary

REFERENCES

Chapter 6. Antiforensics

Introduction

Hiding Data

Password Attacks

Steganography

Data Destruction

Summary

REFERENCES

Chapter 7. Legal

Introduction

The Fourth Amendment

Criminal Law—Searches Without a Warrant

Searching with a Warrant

Electronic Discovery (eDiscovery)

Expert Testimony

Summary

REFERENCES

Chapter 8. Internet and E-Mail

Introduction

Internet Overview

Web Browsers—Internet Explorer

E-Mail

Social Networking Sites

Summary

REFERENCES

Chapter 9. Network Forensics

Introduction

Network Fundamentals

Network Security Tools

Network Attacks

Incident Response

Network Evidence and Investigations

Summary

REFERENCES

Chapter 10. Mobile Device Forensics

Introduction

Cellular Networks

Operating Systems

Cell Phone Evidence

Cell Phone Forensic Tools

Global Positioning Systems (GPS)

Summary

REFERENCES

Chapter 11. Looking Ahead

Introduction

Standards and Controls

Cloud Forensics (Finding/Identifying Potential Evidence Stored In the Cloud)

Solid State Drives (SSD)

Speed of Change

Summary

REFERENCES

Index

ISBN: 9781597496612

Page Count: 208

Illustrations : 50 illustrations

Retail Price (USD) :

Computer Forensics for Dummies, 9780470371916, $29.99, Wiley, Sep 2008

Windows Forensic Analysis, 2e, 9781597494229, $69.95, Syngress, 5/2009

File System Forensics Analysis, 9780321268174, $59.99, Pearson, 3/2005

Access to teacher/student resources is available to registered users with approved review copies or confirmed adoptions. To review this material, please request a review copy.

Default.aspx
default.asp
intro.xml
old_intro.xml
sammons_ppt

Entry-level digital forensics professionals, also complimentary fields such as: law enforcement, legal, general information security.

The Basics of Digital Forensics,

Editors: By John Sammons

Note

Key Features

About the author

Related Titles