File System Forensic Analysis

2005-03-17 Computers

Author : Brian Carrier
Release : 2005-03-17
Genre : Computers
Kind : eBook
Book Rating : 546/5 ( reviews)

GET EBOOK

Book Synopsis File System Forensic Analysis by : Brian Carrier

Download or read book File System Forensic Analysis written by Brian Carrier. This book was released on 2005-03-17. Available in PDF, EPUB and Kindle. Book excerpt: The Definitive Guide to File System Analysis: Key Concepts and Hands-on Techniques Most digital evidence is stored within the computer's file system, but understanding how file systems work is one of the most technically challenging concepts for a digital investigator because there exists little documentation. Now, security expert Brian Carrier has written the definitive reference for everyone who wants to understand and be able to testify about how file system analysis is performed. Carrier begins with an overview of investigation and computer foundations and then gives an authoritative, comprehensive, and illustrated overview of contemporary volume and file systems: Crucial information for discovering hidden evidence, recovering deleted data, and validating your tools. Along the way, he describes data structures, analyzes example disk images, provides advanced investigation scenarios, and uses today's most valuable open source file system analysis tools—including tools he personally developed. Coverage includes Preserving the digital crime scene and duplicating hard disks for "dead analysis" Identifying hidden data on a disk's Host Protected Area (HPA) Reading source data: Direct versus BIOS access, dead versus live acquisition, error handling, and more Analyzing DOS, Apple, and GPT partitions; BSD disk labels; and Sun Volume Table of Contents using key concepts, data structures, and specific techniques Analyzing the contents of multiple disk volumes, such as RAID and disk spanning Analyzing FAT, NTFS, Ext2, Ext3, UFS1, and UFS2 file systems using key concepts, data structures, and specific techniques Finding evidence: File metadata, recovery of deleted files, data hiding locations, and more Using The Sleuth Kit (TSK), Autopsy Forensic Browser, and related open source tools When it comes to file system analysis, no other book offers this much detail or expertise. Whether you're a digital forensics specialist, incident response team member, law enforcement officer, corporate security specialist, or auditor, this book will become an indispensable resource for forensic investigations, no matter what analysis tools you use.

Digital Forensics with Open Source Tools

2011-03-29 Computers

Author : Harlan Carvey
Release : 2011-03-29
Genre : Computers
Kind : eBook
Book Rating : 875/5 ( reviews)

GET EBOOK

Book Synopsis Digital Forensics with Open Source Tools by : Harlan Carvey

Download or read book Digital Forensics with Open Source Tools written by Harlan Carvey. This book was released on 2011-03-29. Available in PDF, EPUB and Kindle. Book excerpt: Digital Forensics with Open Source Tools is the definitive book on investigating and analyzing computer systems and media using open source tools. The book is a technical procedural guide, and explains the use of open source tools on Mac, Linux and Windows systems as a platform for performing computer forensics. Both well-known and novel forensic methods are demonstrated using command-line and graphical open source computer forensic tools for examining a wide range of target systems and artifacts. Written by world-renowned forensic practitioners, this book uses the most current examination and analysis techniques in the field. It consists of 9 chapters that cover a range of topics such as the open source examination platform; disk and file system analysis; Windows systems and artifacts; Linux systems and artifacts; Mac OS X systems and artifacts; Internet artifacts; and automating analysis and extending capabilities. The book lends itself to use by students and those entering the field who do not have means to purchase new tools for different investigations. This book will appeal to forensic practitioners from areas including incident response teams and computer forensic investigators; forensic technicians from legal, audit, and consulting firms; and law enforcement agencies. Written by world-renowned forensic practitioners Details core concepts and techniques of forensic file system analysis Covers analysis of artifacts from the Windows, Mac, and Linux operating systems

Windows Registry Forensics

2011-01-03 Computers

Author : Harlan Carvey
Release : 2011-01-03
Genre : Computers
Kind : eBook
Book Rating : 816/5 ( reviews)

GET EBOOK

Book Synopsis Windows Registry Forensics by : Harlan Carvey

Download or read book Windows Registry Forensics written by Harlan Carvey. This book was released on 2011-01-03. Available in PDF, EPUB and Kindle. Book excerpt: Windows Registry Forensics provides the background of the Windows Registry to help develop an understanding of the binary structure of Registry hive files. Approaches to live response and analysis are included, and tools and techniques for postmortem analysis are discussed at length. Tools and techniques are presented that take the student and analyst beyond the current use of viewers and into real analysis of data contained in the Registry, demonstrating the forensic value of the Registry. Named a 2011 Best Digital Forensics Book by InfoSec Reviews, this book is packed with real-world examples using freely available open source tools. It also includes case studies and a CD containing code and author-created tools discussed in the book. This book will appeal to computer forensic and incident response professionals, including federal government and commercial/private sector contractors, consultants, etc. Named a 2011 Best Digital Forensics Book by InfoSec Reviews Packed with real-world examples using freely available open source tools Deep explanation and understanding of the Windows Registry – the most difficult part of Windows to analyze forensically Includes a CD containing code and author-created tools discussed in the book

Forensic Examination of Windows-Supported File Systems

Author : Doug Elrick
Release :
Genre :
Kind : eBook
Book Rating : 721/5 ( reviews)

GET EBOOK

Book Synopsis Forensic Examination of Windows-Supported File Systems by : Doug Elrick

Download or read book Forensic Examination of Windows-Supported File Systems written by Doug Elrick. This book was released on . Available in PDF, EPUB and Kindle. Book excerpt:

Operating System Forensics

2015-11-12 Computers

Author : Ric Messier
Release : 2015-11-12
Genre : Computers
Kind : eBook
Book Rating : 638/5 ( reviews)

GET EBOOK

Book Synopsis Operating System Forensics by : Ric Messier

Download or read book Operating System Forensics written by Ric Messier. This book was released on 2015-11-12. Available in PDF, EPUB and Kindle. Book excerpt: Operating System Forensics is the first book to cover all three critical operating systems for digital forensic investigations in one comprehensive reference. Users will learn how to conduct successful digital forensic examinations in Windows, Linux, and Mac OS, the methodologies used, key technical concepts, and the tools needed to perform examinations. Mobile operating systems such as Android, iOS, Windows, and Blackberry are also covered, providing everything practitioners need to conduct a forensic investigation of the most commonly used operating systems, including technical details of how each operating system works and how to find artifacts. This book walks you through the critical components of investigation and operating system functionality, including file systems, data recovery, memory forensics, system configuration, Internet access, cloud computing, tracking artifacts, executable layouts, malware, and log files. You'll find coverage of key technical topics like Windows Registry, /etc directory, Web browers caches, Mbox, PST files, GPS data, ELF, and more. Hands-on exercises in each chapter drive home the concepts covered in the book. You'll get everything you need for a successful forensics examination, including incident response tactics and legal requirements. Operating System Forensics is the only place you'll find all this covered in one book. Covers digital forensic investigations of the three major operating systems, including Windows, Linux, and Mac OS Presents the technical details of each operating system, allowing users to find artifacts that might be missed using automated tools Hands-on exercises drive home key concepts covered in the book. Includes discussions of cloud, Internet, and major mobile operating systems such as Android and iOS

Popular eBooks

File System Forensic Analysis

Digital Forensics with Open Source Tools

Windows Registry Forensics

Forensic Examination of Windows-Supported File Systems

Operating System Forensics

You may also like...