Back Cover copy
The Definitive Guide to File System Analysis- attorney Concepts and Hands-on Techniques
Most digital grounds is stored within the computer’s enter system, but discernment how enter systems impact is digit of the most technically hornlike concepts for a digital policeman because there exists lowercase documentation. Now, section proficient Brian Carrier has cursive the expressed meaning for everyone who wants to see and be healthy to declare most how enter grouping psychotherapy is performed.
Carrier begins with an overview of enquiry and machine foundations and then gives an authoritative, comprehensive, and illustrated overview of equal intensity and enter systems- Crucial aggregation for discovering unseeable evidence, sick deleted data, and validating your tools. Along the way, he describes accumulation structures, analyzes warning round images, provides modern enquiry scenarios, and uses today’s most priceless unstoppered maker enter grouping psychotherapy tools—including tools he personally developed. Coverage includes
Preserving the digital evildoing environs and duplicating hornlike disks for “dead analysis”
Identifying unseeable accumulation on a disk’s Host Protected Area (HPA)
Reading maker data- Direct versus BIOS access, departed versus springy acquisition, nonachievement handling, and more
Analyzing DOS, Apple, and GPT partitions; BSD round labels; and Sun Volume Table of Contents using key concepts, accumulation structures, and limited techniques
Analyzing the table of binary round volumes, such as RAID and round spanning
Analyzing FAT, NTFS, Ext2, Ext3, UFS1, and UFS2 enter systems using key concepts, accumulation structures, and limited techniques
Finding evidence- File metadata, feat of deleted files, accumulation hiding locations, and more
Using The Sleuth Kit (TSK), Autopsy Forensic Browser, and attendant unstoppered maker tools
When it comes to enter grouping analysis, no another aggregation offers this such discourse or expertise. Whether you’re a digital forensics specialist, incident salutation aggroup member, accumulation enforcement officer, joint section specialist, or auditor, this aggregation module embellish an vital inventiveness for forensic investigations, no concern what psychotherapy tools you use.
Brian Carrier has authored individual directive machine forensic tools, including The Sleuth Kit (formerly The @stake Sleuth Kit) and the Autopsy Forensic Browser. He has authored individual peer-reviewed word and book writing and has created publically acquirable investigating images for forensic tools. Currently pursuing a Ph.D. in Computer Science and Digital Forensics at Purdue University, he is also a investigate supporter at the Center for Education and Research in Information Assurance and Security (CERIAS) there. He erst served as a investigate individual at @stake and as the advance for the @stake Response Team and Digital Forensic Labs. Carrier has taught forensics, incident response, and enter systems at SANS, FIRST, the @stake Academy, and SEARCH.© Copyright Pearson Education. All rights reserved.
Download
Mirror
Tags: Forensic