Real Digital Forensics: Computer Security And Incident Response - Brossura

Jones, Keith J.; Bejtlich, Richard; Rose, Curtis W.

Brossura

ISBN 10: 0321240693 ISBN 13: 9780321240699

Casa editrice: Addison-Wesley Professional, 2005

Riassunto

An interactive book-and-DVD package designed to help readers master the tools and techniques of forensic analysis offers a hands-on approach to identifying and solving problems related to computer security issues; introduces the tools, methods, techniques, and applications of computer forensic investigation; and allows readers to test skills by working with real data with the help of five scenarios. Original. (Intermediate)

Su questo libro

Dalla quarta di copertina

You can't succeed in the field of computer forensics without hands-on practice—and you can't get hands-on practice without real forensic data. The solution: Real Digital Forensics. In this book, a team of world-class computer forensics experts walks you through six detailed, highly realistic investigations and provides a DVD with all the data you need to follow along and practice.

From binary memory dumps to log files, this DVD's intrusion data was generated by attacking live systems using the same tools and methods real-world attackers use. The evidence was then captured and analyzed using the same tools the authors employ in their own investigations. This book relies heavily on open source tools, so you can perform virtually every task without investing in any commercial software.

You'll investigate environments ranging from financial institutions to software companies and crimes ranging from intellectual property theft to SEC violations. As you move step by step through each investigation, you'll discover practical techniques for overcoming the challenges forensics professionals face most often.

Inside, you will find in-depth information on the following areas:

• Responding to live incidents in both Windows and Unix environments

• Determining whether an attack has actually occurred

• Assembling a toolkit you can take to the scene of a computer-related crime

• Analyzing volatile data, nonvolatile data, and files of unknown origin

• Safely performing and documenting forensic duplications

• Collecting and analyzing network-based evidence in Windows and Unix environments

• Reconstructing Web browsing, e-mail activity, and Windows Registry changes

• Tracing domain name ownership and the source of e-mails

• Duplicating and analyzing the contents of PDAs and flash memory devices

The accompanying DVD contains several gigabytes of compressed data generated from actual intrusions. This data mirrors what analysts might find in real investigations and allows the reader to learn about forensic investigations in a realisticsetting.

© Copyright Pearson Education. All rights reserved.

Product Description

Book by Jones Keith J Bejtlich Richard Rose Curtis W

Dettagli dell?edizione

• Editore: Addison-Wesley Professional
• Data di pubblicazione: 2005
• ISBN 10: 0321240693
• ISBN 13: 9780321240699
• Rilegatura: Copertina flessibile
• Lingua: Inglese
• Numero edizione: 1
• Numero di pagine: 650