Handbook of Digital Forensics and Investigation (Paperback)

Eoghan Casey

  • 出版商: Academic Press
  • 出版日期: 2009-11-01
  • 售價: $1,800
  • 貴賓價: 9.5$1,710
  • 語言: 英文
  • 頁數: 600
  • 裝訂: Paperback
  • ISBN: 0123742676
  • ISBN-13: 9780123742674
  • 相關分類: 資訊安全Computer-networks
  • 立即出貨 (庫存=1)

買這商品的人也買了...

商品描述

The Handbook of Digital Forensics and Investigation builds on the success of the Handbook of Computer Crime Investigation, bringing together renowned experts in all areas of digital forensics and investigation to provide the consummate resource for practitioners in the field. This unique collection details how to conduct digital investigations in both criminal and civil contexts, and how to locate and utilize digital evidence on computers, networks, and embedded systems. Specifically, the Investigative Methodology section of the Handbook provides expert guidance in the three main areas of practice: Forensic Analysis, Electronic Discovery and Intrusion Investigation. The Technology section is extended and updated to reflect the state of the art in each area of specialization. The main areas of focus in the Technology section are forensic analysis of Windows, Unix, Macintosh, and embedded systems (including cellular telephones and other mobile devices), and investigations involving networks (including enterprise environments and mobile telecommunications technology). The Handbook of Digital Forensics and Investigation is an essential technical reference and on-the-job guide that IT professionals, forensic practitioners, law enforcement, and attorneys will rely on when confronted with computer related crime and digital evidence of any kind.



*Provides methodologies proven in practice for conducting digital investigations of all kinds
*Demonstrates how to locate and interpret a wide variety of digital evidence, and how it can be useful in investigations
*Presents tools in the context of the investigative process, including EnCase, FTK, ProDiscover, foremost, XACT, Network Miner, Splunk, flow-tools, and many other specialized utilities and analysis platforms
*Case examples in every chapter give readers a practical understanding of the technical, logistical, and legal challenges that arise in real investigations

商品描述(中文翻譯)

《數位取證與調查手冊》是在《電腦犯罪調查手冊》的成功基礎上建立起來的,匯集了數位取證與調查領域的知名專家,為該領域的從業人員提供了最佳的資源。這本獨特的手冊詳細介紹了如何在刑事和民事背景下進行數位調查,以及如何在電腦、網絡和嵌入式系統上定位和利用數位證據。具體而言,手冊的調查方法部分提供了在三個主要實踐領域中的專家指導:取證分析、電子發現和入侵調查。技術部分則根據各專業領域的最新發展進行了擴展和更新。技術部分的主要焦點是對Windows、Unix、Macintosh和嵌入式系統(包括手機和其他移動設備)進行取證分析,以及涉及網絡(包括企業環境和移動通信技術)的調查。《數位取證與調查手冊》是IT專業人員、取證從業人員、執法人員和律師在面對任何類型的電腦相關犯罪和數位證據時所依賴的重要技術參考和在職指南。

本書提供了在實踐中證明有效的各種數位調查方法論。
演示了如何定位和解讀各種數位證據,以及它們在調查中的用途。
在調查過程中,將工具放在上下文中進行介紹,包括EnCase、FTK、ProDiscover、foremost、XACT、Network Miner、Splunk、flow-tools和許多其他專門的工具和分析平台。
每章都提供案例示例,讓讀者實際了解在真實調查中出現的技術、後勤和法律挑戰。