Book
Digital Forensics with Open Source Tools
Digital Forensics with Open Source Tools
| Identifier | --coryalthei-1153 |
|---|---|
| Penulis / Pengarang | Cory Altheide and Harlan Carvey |
| Kata Kunci | Digital Forensics |
| Tanggal Publikasi | 09 Mar 2011 |
| Bahasa | Bahasa Inggris |
| Abstrak / Deskripsi | Beyond the introductory chapter that follows, the rest of this book is divided up into eight chapters and one Appendix. Chapter 2 discusses the Open Source Examination Platform. We walk through all the prerequisites required to start compiling source code into executable code, install interpreters, and ensure we have a proper environment to build software on Ubuntu and Windows. We also install a Linux emulation environment on Windows along with some additional packages to bring Windows closer to “feature parity” with Linux for our purposes. Chapter 3 details Disk and File System Analysis using the Sleuth Kit. The Sleuth Kit is the premier open source file system forensic analysis framework. We explain use of the Sleuth Kit and the fundamentals of media analysis, disk and partition structures, and file system concepts. We also review additional core digital forensics topics such as hashing and the creation of forensic images. Chapter 4 begins our operating system-specific examination chapters with Windows Systems and Artifacts. We cover analysis of FAT and NTFS file systems, including internal structures of the NTFS Master File Table, extraction and analysis of Registry hives, event logs, and other Windows-specific artifacts. Finally, because xvi Introduction malware-related intrusion cases are becoming more and more prevalent, we discuss some of the artifacts that can be retrieved from Windows executable files. |
File Lampiran / Download (1)
| No | Nama Berkas | Format | Ukuran | Aksi |
|---|---|---|---|---|
| 1 | 2011 Digital Forensics with Open Source Tools.pdf | application/pdf | 6,5 MB | ⬇️ Buka / Download |
Komentar & Diskusi (0)
Belum ada komentar untuk koleksi ini. Jadilah yang pertama berdiskusi!