Amazon no longer offers textbook rentals. We do!

Hacking Exposed Computer Forensics

by: Davis, Chris

Hacking Exposed Computer Forensics

by: Davis, Chris

ISBN 13:
9780072256758
ISBN 10:
0072256753
Edition: 1st
Format: Paperback
Copyright: 11/22/2004
Publisher: McGraw-Hill Osborne Media
Newer Edition

Rent

Sorry, this item is currently unavailable.

Note: Supplemental materials are not guaranteed with Rental or Used book purchases.

Extend or Purchase Your Rental at Any Time

Need to keep your rental past your due date? At any time before your due date you can extend or purchase your rental through your account.

Summary

Investigate computer crime, corporate malfeasance, and hacker break-ins quickly and effectively with help from this practical and comprehensive resource. You'll get expert information on crucial procedures to successfully prosecute violators while avoiding the pitfalls of illicit searches, privacy violations, and illegally obtained evidence. It's all here--from collecting actionable evidence, re-creating the criminal timeline, and zeroing in on a suspect to uncovering obscured and deleted code, unlocking encrypted files, and preparing lawful affidavits. Plus, you'll get in-depth coverage of the latest PDA and cell phone investigation techniques and real-world case studies.

Foreword

xix

Acknowledgments

xxiii

Introduction

xvii

Part I Preparing for an Incident

Case Study: Lab Preparations

(3)

Cashing Out

(1)

Preparing for a Forensics Operation

(3)

The Forensics Process

(14)

Types of Investigations

(2)

The Role of the Investigator

(2)

Elements of a Good Process

(3)

Cross-Validation

(1)

Proper Evidence Handling

(1)

Completeness of Investigation

(1)

Management of Archives

(1)

Technical Competency

(1)

Explicit Definition and Justification for the Process

(1)

Legal Compliance

(1)

Flexibility

(1)

Defining a Process

(6)

Assessment

(1)

Acquisition

(1)

Authentication

(1)

Analysis

(1)

Articulation

(1)

Archival

(3)

Computer Fundamentals

(20)

The Bottom-Up View of a Computer

(5)

It's All Just 1s and 0s

(2)

Learning from the Past: Giving Computers Memory

(2)

Basic Input and Output System (BIOS)

(1)

The Operating System

(1)

The Applications

(1)

Types of Media

(14)

Magnetic Media

(8)

Optical Media

(1)

Memory Technologies

(5)

Forensic Lab Environment Preparation

(18)

The Ultimate Computer Forensic Lab

(6)

What Is a Computer Forensic Laboratory?

(1)

Forensic Lab Security

(1)

Protecting the Forensic Lab

(4)

Forensic Computers

(5)

Components of a Forensic Host

(2)

Commercially Available Hardware Systems

(1)

Do-It-Yourself Hardware Systems

(1)

Data Storage

(1)

Forensic Hardware and Software Tools

(1)

Using Hardware Tools

(1)

Using Software Tools

(1)

Case Management

(1)

The Flyaway Kit

(1)

Bonus: Linux or Windows?

(2)

Part II Collecting the Evidence

Case Study: The Collections Agency

(1)

Preparations

(1)

Revelations

(1)

Collecting Evidence

(1)

Forensically Sound Evidence Collection

(26)

Collecting Evidence from a Single System

(22)

Step 1: Power Down the Suspect System

(1)

Step 2: Remove the Drive(s) from the Suspect System

(1)

Step 3: Check for Other Media

(1)

Step 4: Record BIOS Information

(1)

Step 5: Forensically Image the Drive

(17)

Step 6: Record Cryptographic Hashes

(1)

Step 7: Bag and Tag

(1)

Move Forward

(2)

Common Mistakes in Evidence Collection

(3)

Remote Investigations and Collections

(28)

Privacy Issues

(1)

Remote Investigations

(9)

Remote Investigation Tools

(8)

Remote Collections

(11)

Remote Collection Tools

(10)

Encrypted Volumes or Drives

105

(2)

USB Thumb Drives

107

(3)

Part III Forensic Investigation Techniques

Case Study: Analyzing the Data

110

(1)

Digging for Clues

110

(1)

We're Not Done. Yet

110

(1)

Finally

110

(1)

Microsoft Windows Systems Analysis

111

(26)

Windows File Systems

112

(5)

Master Boot Record

112

(1)

FAT File System

112

(4)

NTFS

116

(1)

Recovering Deleted Files

117

(12)

Limitations

127

(2)

Windows Artifacts

129

(8)

Linux Analysis

137

(14)

The Linux File System (ext2 and ext3)

138

(4)

ext2 Structure

138

(3)

ext3 Structure

141

(1)

Linux Swap

142

(1)

Linux Analysis

142

(9)

Macintosh Analysis

151

(16)

The Evolution of the Mac OS

152

(2)

Looking at a Mac Disk or Image

154

(3)

The Apple Partition Map

154

(1)

Trees and Nodes

155

(2)

Deleted Files

157

(5)

Recovering Deleted Files

159

(1)

Concatenating Unallocated Space

160

(1)

Scavenging for Unindexed Files and Pruned Nodes

161

(1)

A Closer Look at Macintosh Files

162

(3)

Amazon no longer offers textbook rentals. We do!

Hacking Exposed Computer Forensics

Hacking Exposed Computer Forensics

9780072256758

0072256753

Summary

Author Biography

Table of Contents

Supplemental Materials

Write a Review

Amazon no longer offers textbook rentals. We do!

Hacking Exposed Computer Forensics

Hacking Exposed Computer Forensics

9780072256758

0072256753

Summary

Author Biography

Table of Contents

Supplemental Materials

Write a Review

Related Products