»
Digital Forensics with Open Source Tools
 
 

Digital Forensics with Open Source Tools, 1st Edition

 
Digital Forensics with Open Source Tools, 1st Edition,Cory Altheide,Harlan Carvey,ISBN9781597495868
 
 
 

  &      

Syngress

9781597495868

9781597495875

288

235 X 191

A guide to performing digital forensic investigations using open-source computer forensic tools.

Print Book + eBook

USD 71.94
USD 119.90

Buy both together and save 40%

Print Book

Paperback

In Stock

Estimated Delivery Time
USD 59.95

eBook
eBook Overview

VST format:

DRM Free included formats: EPub, Mobi, PDF

USD 59.95
Add to Cart
 
 

Key Features

    • Written by world-renowned forensic practitioners
    • Details core concepts and techniques of forensic file system analysis
    • Covers analysis of artifacts from the Windows, Mac, and Linux operating systems

    Description

    Digital Forensics with Open Source Tools is the definitive book on investigating and analyzing computer systems and media using open source tools. The book is a technical procedural guide, and explains the use of these tools on Linux and Windows systems as a platform for performing computer forensics. Both well known and novel forensic methods are demonstrated using command-line and graphical open source computer forensic tools for examining a wide range of target systems and artifacts.

    Readership

    Forensic Practitioners from areas including: Incident response teams and computer forensic investigators, forensic technicians from legal, audit, and consulting firms, and law enforcement agencies

    Cory Altheide

    Cory Altheide is a Security Engineer at Google, focused on forensics and incident response. Prior to returning to Google, Cory was a principal consultant with MANDIANT, an information security consulting firm that works with the Fortune 500, the defense industrial base and the banks of the world to secure their networks and combat cyber-crime. In this role he responded to numerous incidents for a variety of clients. Cory has authored several papers for the computer forensics journal Digital Investigation and was a contributing author for UNIX and Linux Forensic Analysis (2008) & The Handbook Of Digital Forensics and Investigation (2010). Additionally, Cory is a recurring member of the program committee of the Digital Forensics Research Workshop (DFRWS).

    Affiliations and Expertise

    Cory Altheide is a Security Engineer at Google, focused on forensics and incident response. Prior to returning to Google, Cory was a principal consultant with MANDIANT, an information security consulting firm that works with the Fortune 500, the defense industrial base and the banks of the world to secure their networks and combat cyber-crime. In this role he responded to numerous incidents for a variety of clients. Cory has authored several papers for the computer forensics journal Digital Investigation and was a contributing author for UNIX and Linux Forensic Analysis (2008) & The Handbook Of Digital Forensics and Investigation (2010). Additionally, Cory is a recurring member of the program committee of the Digital Forensics Research Workshop (DFRWS).

    Harlan Carvey

    Harlan Carvey (CISSP) is a Vice President of Advanced Security Projects with Terremark Worldwide, Inc. Terremark is a leading global provider of IT infrastructure and “cloud computing” services, based in Miami, FL. Harlan is a key contributor to the Engagement Services practice, providing disk forensics analysis, consulting, and training services to both internal and external customers. Harlan has provided forensic analysis services for the hospitality industry, financial institutions, as well as federal government and law enforcement agencies. Harlan’s primary areas of interest include research and development of novel analysis solutions, with a focus on Windows platforms. Harlan holds a bachelor’s degree in electrical engineering from the Virginia Military Institute and a master’s degree in the same discipline from the Naval Postgraduate School. Harlan resides in Northern Virginia with his family.

    Affiliations and Expertise

    (CISSP) Vice President of Advanced Security Projects with Terremark Worldwide, Inc., which is headquartered in Miami, FL. Harlan has provided forensic analysis services for the hospitality industry, financial institutions, as well as federal government and law enforcement agencies. Harlan resides in Northern Virginia with his family.

    View additional works by Harlan Carvey

    Digital Forensics with Open Source Tools, 1st Edition

    Chapter 1: Digital Forensics with Open Source Tools

    Welcome to "Digital Forensics with Open Source Tools"

    What is "Digital Forensics?"

    What is "Open Source?"

    Benefits of Open Source Tools

    References

    Chapter 2 The Open Source Examination Platform

    Introduction

    Preparing The Examination System

    Using Linux as the Host

    Using Windows as the Host

    Summary

    References

    Chapter 3: Disk & File System Analysis

    Introduction

    Media Analysis Concepts

    The Sleuth Kit

    Partitioning & Disk Layouts

    Special Containers

    Hashing

    Carving

    Forensic Imaging

    Summary

    References

    Chapter 4: Windows Systems and Artifacts

    Introduction

    Windows File Systems

    Registry

    Event Logs

    Other Artifacts

    Windows Executables

    Summary

    References

    Chapter 5: Linux Systems & Artifacts

    Introduction

    Linux File Systems

    Linux Boot Process & Services

    Linux System Organization & Artifacts

    User Accounts

    Home Directories

    Logs

    Scheduling Tasks

    Summary

    References

    Chapter 6: Mac OS X Systems & Artifacts

    Introduction

    OS X File System Artifacts

    OS X System Artifacts

    User Artifacts

    Summary

    References

    Chapter 7: Internet Artifacts

    Introduction

    Browser Artifacts

    Mail Artifacts

    Summary

    References

    Chapter 8: File Analysis

    Introduction

    File Analysis Concepts

    Images

    Audio

    Video

    Archives

    Documents

    Summary

    References

    Chapter 9: Automating Analysis & Extending Capabilities

    Introduction

    Graphical Investigation Environments

    Automating Artifact Extraction

    Timelines

    Summary

    References

    Appendix A: Free, Non-Open Tools of Note

    Introduction

    Chapter 3: File System Analysis

    Chapter 4: Windows Artifacts

    Chapter 7: Internet Artifacts

    Chapter 8: File Analysis

    Chapter 9: Automating Analysis & Extending Capabilities

    Validation & Testing Resources

    References

    Quotes and reviews

    "This is highly detailed material. Although the introductory chapter adopts an easy pace, with overviews of important technical concepts, most of the other chapters get right down to the practice of forensic analysis. This is not a book you’re going to want to read in bed: you’ll want this right next to a computer - preferably two or three computers running different operating systems - so that you can try the techniques for yourself as you work your way through. The authors admit that this book does not cover everything you need to know. For instance, it focuses entirely on ‘dead drive’ forensics - offline systems. Analysing running systems often requires high-level proprietary tools. But it does give an excellent grounding in the methods of digital forensic analysis and provides a valuable first step in learning the technicalities."--Network Security, May 2012, page 4

    "Digital Forensics - MacGyver Style! The practical solutions of this book, Digital Forensics with Open Source Tools, save the day when commercial tools fail. During an incident, the clock ticks. Response teams scramble to pull anything together to solve the immediate challenge. Cory Altheide and Harlan Carvey take you through the tools and tactics that you need - the ones that in a pinch will get the job done. A welcome addition to my library."--Rob Lee, SANS Institute

    "Intended for students and new computer professionals, or those new to open source applications, this guide to digital forensics provides practical instructions for many common tasks in data recovery and analysis using open source tools. Beginning with a discussion of setting up an open source examination platform and tool set, the work covers disk and file system analysis, Windows, GNU/Linux and Mac OS X systems and artifacts, Internet artifacts, file analysis and automated analysis. The volume includes numerous code examples and tips and tricks as well as an appendix of software tools."--Reference and Research Book News

    "Intended for students and new computer professionals, or those new to open source applications, this guide to digital forensics provides practical instructions for many common tasks in data recovery and analysis using open source tools. Beginning with a discussion of setting up an open source examination platform and tool set, the work covers disk and file system analysis, Windows, GNU/Linux and Mac OS X systems and artifacts, Internet artifacts, file analysis and automated analysis. The volume includes numerous code examples and tips and tricks as well as an appendix of software tools. Chapter examples assume a basic knowledge of the Linux command line interface."--Reference and Research Book News

    "The authors intended this book for two types of readers: complete novices in the world of digital forensics, and seasoned practitioners who are interested in learning more about open source tools that could help them in their work. And although it might seem difficult to merge the knowledge in such a way to make for an interesting book for both groups, in my opinion, the writers managed to do it beautifully."--Net-Security.org

     
     
    Cyber Monday SALE Upto 50 Percent OFF | Use Code CYBER14
    Shop with Confidence

    Free Shipping around the world
    ▪ Broad range of products
    ▪ 30 days return policy
    FAQ

    Contact Us