• Learn the tools and investigative principles of both physical and digital cybercrime investigations—and how they fit together to build a solid and complete case.
• Master the techniques of conducting a holistic investigation that combines both digital and physical evidence to track down the "suspect behind the keyboard."
• The only book to combine physical and digital investigative techniques.
Placing the Suspect Behind the Keyboard is the definitive book on conducting a complete investigation of a cybercrime using digital forensics techniques as well as physical investigative procedures. This book merges a digital analysis examiner's work with the work of a case investigator in order to build a solid case to identify and prosecute cybercriminals.
Brett Shavers links traditional investigative techniques with high tech crime analysis in a manner that not only determines elements of crimes, but also places the suspect at the keyboard. This book is a first in combining investigative strategies of digital forensics analysis processes alongside physical investigative techniques in which the reader will gain a holistic approach to their current and future cybercrime investigations.
Information Security professionals of all levels, digital forensic examiners and investigators, IT managers, InfoSec consultants, criminologists, sociologists, attorneys, law enforcement officers, Also can sell to forensic training vendors, government training courses, and high-tech crime associations.
Placing the Suspect Behind the Keyboard, 1st Edition
About the Author
About the Technical Editor
Chapter 1. Introduction
Digital Evidence Collection
Simple File Copying
“Dead Box” Approaches
“Live Box” Approaches
SmartPhones and Cellular Devices
Chapter 2. High Tech Interview
The Main Goal of Questioning a Suspect
The Line of Questions for Suspects
Questions for Victims
Questions for Network Administrators
Chapter 3. Physical Investigations
Hazards of Acting Upon Minimal Information
Obtaining Personal Information
Undercover and Informant Operations
Chapter 4. Technical Investigations
Digital Investigative Techniques
Who? What? When? Why? Where? and How?
“Other” Device Forensics
Online Social Networking
Biological Forensic Evidence
Triage and Previews
Chapter 5. Putting It All Together
“2+2=Putting it all together”
Follow the Evidence
Chapter 6. Investigative Case Management
Chapter 7. Case Presentation
It’s Not Whether You Win or Lose
Organizing Case Information
Value of Visuals
The Suspect’s Machine
Avoid TMI (Too Much Information)
Chapter 8. Cheat Sheets and Quickstart Guides
Cheat Sheets and Quickstart Guides
Chapter 9. Some Things Will Become Easier, Others Not So Much
It Will Become Easier to Place a Suspect Behind the Keyboard
It Will Become More Difficult to Place a Suspect Behind the Keyboard
Chapter 10. Online Investigations
Capturing Webpages as Evidence
Chapter 11. Case Studies
A Day in the Life of a Cybercriminal
The Life and Casework of a Cyber Investigator
Testifying to Your Work