Digital Forensics with Open Source Tools
Digital Forensics with Open Source Tools is the definitive book on investigating and analyzing computer systems and media using open source tools. The book is a technical procedural guide, and explains the use of open source tools on Mac, Linux and Windows systems as a platform for performing computer forensics. Both well-known and novel forensic methods are demonstrated using command-line and graphical open source computer forensic tools for examining a wide range of target systems and artifacts.
Written by world-renowned forensic practitioners, this book uses the most current examination and analysis techniques in the field. It consists of 9 chapters that cover a range of topics such as the open source examination platform; disk and file system analysis; Windows systems and artifacts; Linux systems and artifacts; Mac OS X systems and artifacts; Internet artifacts; and automating analysis and extending capabilities. The book lends itself to use by students and those entering the field who do not have means to purchase new tools for different investigations.
This book will appeal to forensic practitioners from areas including incident response teams and computer forensic investigators; forensic technicians from legal, audit, and consulting firms; and law enforcement agencies.
- Written by world-renowned forensic practitioners
- Details core concepts and techniques of forensic file system analysis
- Covers analysis of artifacts from the Windows, Mac, and Linux operating systems
9781597495868
Book, Paperback
Digital Forensics with Open Source Tools
- Author: Cory Altheide, Harlan Carvey
Syngress Publishing, 2011
264
English
9.2 x 7.4 x 0.9 inches, 2 pounds
Illustrated
| Acceptable: | Fairly worn but fully readable and intact. Pages may include notes, highlighting, or minor water damage. Dust jacket, CDs, product codes, or other inclusions may be missing or expired. |
| Good: | Shows signs of wear. Pages may include limited notes or highlighting. Dust jacket, CDs, product codes, or other inclusions may be missing or expired. |
| Very Good: | Item has seen limited use and has minimal signs of wear. Pages are clean without markings. Dust jacket, CDs, product codes, or other inclusions may be missing or expired. |
| Like New: | Shows little to no signs of wear. Spine has no signs of creasing. Pages are clean without markings. CDs, product codes, or other inclusions may be missing or expired. |
| New: | Brand new, unused, and in perfect condition. Includes all original packaging and accessories. |