基本説明
Presents the detailed technical information - how to locate evidence in computer hard drives, shared networks, wireless devices, or embedded systems.
Full Description
Following on the success of his introductory text, Digital Evidence and Computer Crime, Eoghan Casey brings together a few top experts to create the first detailed guide for professionals who are already familiar with digital evidence. The Handbook of Computer Crime Investigation helps readers master the forensic analysis of computer systems with a three-part approach covering tools, technology, and case studies.
The Tools section provides the details on leading software programs, with each chapter written by that product's creator. The section ends with an objective comparison of the strengths and limitations of each tool.
The main Technology section provides the technical "how to" information for collecting and analyzing digital evidence in common situations, starting with computers, moving on to networks, and culminating with embedded systems. The Case Examples section gives readers a sense of the technical, legal, and practical challenges that arise in real computer investigations.
Contents
About the AuthorsAcknowledgements1. Introduction2. The Other Side of Civil DiscoveryTOOLS3. The EnCase Process4. Incident Response Tools5. NFR Security6. Tool Testing and Analytical MethodologyTECHNOLOGY7. Windows Analysis8. Unix Analysis9. Network Analysis10. Wireless Network Analysis11. Embedded Systems AnalysisCASE EXAMPLES12. Homicide and Child Pornography13. Internet Gambling14. Computer IntrusionsAuthor IndexSubject Index
