Windows Forensics

The Ultimate Field Guide for Corporate Computer Investigations

Chad Steel

408 pages, parution le 16/05/2006

Ajouter à une liste

Indisponible

Résumé

The evidence is in-to solve Windows crime, you need Windows tools

An arcane pursuit a decade ago, forensic science today is a household term. And while the computer forensic analyst may not lead as exciting a life as TV's CSIs do, he or she relies just as heavily on scientific principles and just as surely solves crime.

Whether you are contemplating a career in this growing field or are already an analyst in a Unix/Linux environment, this book prepares you to combat computer crime in the Windows world. Here are the tools to help you recover sabotaged files, track down the source of threatening e-mails, investigate industrial espionage, and expose computer criminals.

Identify evidence of fraud, electronic theft, and employee Internet abuse
Investigate crime related to instant messaging, Lotus Notes®, and increasingly popular browsers such as Firefox®
Learn what it takes to become a computer forensics analyst
Take advantage of sample forms and layouts as well as case studies
Protect the integrity of evidence
Compile a forensic response toolkit
Assess and analyze damage from computer crime and process the crime scene
Develop a structure for effectively conducting investigations
Discover how to locate evidence in the Windows Registry

Sommaire

Windows Forensics
Processing the Digital Crime Scene
Windows Forensic Basics
Partitions and File Systems
Directory Structure and Special Files
The Registry
Forensic Analysis
Live System Analysis
Forensic Duplication
File System Analysis
Log File Analysis
Internet Usage Analysis
Email Investigations

Appendix A. Sample Chain of Custody Form
Appendix B. Master Boot Record Layout
Appendix C. Partition Types
Appendix D. FAT32 Boot Sector Layout
Appendix E. NTFS Boot Sector Layout
Appendix F. NTFS Metafiles
Appendix G. Well-Known SIDs

Voir tout

Replier

Caractéristiques techniques

	PAPIER
Éditeur(s)	Wiley
Auteur(s)	Chad Steel
Parution	16/05/2006
Nb. de pages	408
Format	19 x 23,5
Couverture	Broché
Poids	605g
Intérieur	Noir et Blanc
EAN13	9780470038628