Publisher Description

Digital Forensics with Open Source Tools

Notes

A guide to implementing forensic methods using open-source computer forensic tools.

Back Cover

Digital Forensics with Open Source Tools is the definitive book on investigating and analyzing computer systems and media using open source tools. The book is a technical procedural guide, and explains the use of these tools on Linux and Windows systems as a platform for performing computer forensics. Both well known and novel forensic methods are demonstrated using command-line and graphical open source computer forensic tools for examining a wide range of target systems and artifacts.

Table of Contents

1. Digital Forensics with Open Source Tools2. The Open Source Examination Platform3. Disk and File System Analysis4. Windows Systems and Artifacts5. Linux Systems and Artifacts6. Mac OS Systems and Artifacts7. Internet Artifacts8. File Analysis9. Automating Analysis and Extending CapabilitiesAppendix A: Free, Non-Open Tools of Note

Review

"This is highly detailed material. Although the introductory chapter adopts an easy pace, with overviews of important technical concepts, most of the other chapters get right down to the practice of forensic analysis. This is not a book you're going to want to read in bed: you'll want this right next to a computer – preferably two or three computers running different operating systems – so that you can try the techniques for yourself as you work your way through. The authors admit that this book does not cover everything you need to know. For instance, it focuses entirely on 'dead drive' forensics – offline systems. Analysing running systems often requires high-level proprietary tools. But it does give an excellent grounding in the methods of digital forensic analysis and provides a valuable first step in learning the technicalities." --Network Security, May 2012"Digital Forensics – MacGyver Style! The practical solutions of this book, Digital Forensics with Open Source Tools, save the day when commercial tools fail. During an incident, the clock ticks. Response teams scramble to pull anything together to solve the immediate challenge. Cory Altheide and Harlan Carvey take you through the tools and tactics that you need – the ones that in a pinch will get the job done. A welcome addition to my library." --Rob Lee, SANS Institute"Intended for students and new computer professionals, or those new to open source applications, this guide to digital forensics provides practical instructions for many common tasks in data recovery and analysis using open source tools. Beginning with a discussion of setting up an open source examination platform and tool set, the work covers disk and file system analysis, Windows, GNU/Linux and Mac OS systems and artifacts, Internet artifacts, file analysis and automated analysis. The volume includes numerous code examples and tips and tricks as well as an appendix of software tools." --Reference and Research Book News"Intended for students and new computer professionals, or those new to open source applications, this guide to digital forensics provides practical instructions for many common tasks in data recovery and analysis using open source tools. Beginning with a discussion of setting up an open source examination platform and tool set, the work covers disk and file system analysis, Windows, GNU/Linux and Mac OS systems and artifacts, Internet artifacts, file analysis and automated analysis. The volume includes numerous code examples and tips and tricks as well as an appendix of software tools. Chapter examples assume a basic knowledge of the Linux command line interface." --Reference and Research Book News"The authors intended this book for two types of readers: complete novices in the world of digital forensics, and seasoned practitioners who are interested in learning more about open source tools that could help them in their work. And although it might seem difficult to merge the knowledge in such a way to make for an interesting book for both groups, in my opinion, the writers managed to do it beautifully." --Net-Security.org

Promotional

A guide to performing digital forensic investigations using open-source computer forensic tools.

Long Description

Edward Gibbon's presentation of character in both the History of the Decline and Fall of the Roman Empire and in his posthumously published Memoirs demonstrates a prevailing interest in the values of transcendent heroism and individual liberty, but also an insistent awareness of the dangers these values pose to coherence and narrative order. In this study, Charlotte Roberts demonstrates how these dynamics also inform the 'character' of theDecline and Fall: in which ironic difference confronts enervating uniformity; oddity counters specious lucidity; and revision combats repetition.Edward Gibbon and the Shape of History explores the Decline and Fall as a work of scholarship and of literature, tracing both its expansive outline and itsexpressive details. A close examination of each of the three instalments of Gibbon's history reveals an intimate relationship between the style of Gibbon's narrative and the overall shape of his historiographical composition. The constant interplay between style and substance, or between the particular details of composition and the larger patterns of argument and narrative, informs every aspect of Gibbon's work: from his reception of established and innovative historiographical conventionsto the expression of his narrative voice. Through a combination of close reading and larger literary and scholarly analysis, Charlotte Roberts conveys a sense of the Decline and Fall as a work more complex and conflicted, in its tone and structure, than has been appreciated by previous scholars,without losing sight of the grand contours of Gibbon's superlative achievement.

Review Quote

"This is highly detailed material. Although the introductory chapter adopts an easy pace, with overviews of important technical concepts, most of the other chapters get right down to the practice of forensic analysis. This is not a book you're going to want to read in bed: you'll want this right next to a computer - preferably two or three computers running different operating systems - so that you can try the techniques for yourself as you work your way through. The authors admit that this book does not cover everything you need to know. For instance, it focuses entirely on 'dead drive' forensics - offline systems. Analysing running systems often requires high-level proprietary tools. But it does give an excellent grounding in the methods of digital forensic analysis and provides a valuable first step in learning the technicalities."-- Network Security, May 2012, page 4 " Digital Forensics - MacGyver Style! The practical solutions of this book, Digital Forensics with Open Source Tools , save the day when commercial tools fail. During an incident, the clock ticks. Response teams scramble to pull anything together to solve the immediate challenge. Cory Altheide and Harlan Carvey take you through the tools and tactics that you need - the ones that in a pinch will get the job done. A welcome addition to my library ."-- Rob Lee, SANS Institute "Intended for students and new computer professionals, or those new to open source applications, this guide to digital forensics provides practical instructions for many common tasks in data recovery and analysis using open source tools. Beginning with a discussion of setting up an open source examination platform and tool set, the work covers disk and file system analysis, Windows, GNU/Linux and Mac OS systems and artifacts, Internet artifacts, file analysis and automated analysis. The volume includes numerous code examples and tips and tricks as well as an appendix of software tools."-- Reference and Research Book News "Intended for students and new computer professionals, or those new to open source applications, this guide to digital forensics provides practical instructions for many common tasks in data recovery and analysis using open source tools. Beginning with a discussion of setting up an open source examination platform and tool set, the work covers disk and file system analysis, Windows, GNU/Linux and Mac OS systems and artifacts, Internet artifacts, file analysis and automated analysis. The volume includes numerous code examples and tips and tricks as well as an appendix of software tools. Chapter examples assume a basic knowledge of the Linux command line interface."-- Reference and Research Book News "The authors intended this book for two types of readers: complete novices in the world of digital forensics, and seasoned practitioners who are interested in learning more about open source tools that could help them in their work. And although it might seem difficult to merge the knowledge in such a way to make for an interesting book for both groups, in my opinion, the writers managed to do it beautifully." --Net-Security.org

Promotional "Headline"

A guide to performing digital forensic investigations using open-source computer forensic tools.

Feature

Written by world-renowned forensic practitioners Details core concepts and techniques of forensic file system analysis Covers analysis of artifacts from the Windows, Mac, and Linux operating systems

Details