Real Digital Forensics: Computer Security and Incident Response
You can't succeed in the field of computer forensics without hands-on practice—and you can't get hands-on practice without real forensic data. The solution: Real Digital Forensics. In this book, a team of world-class computer forensics experts walks you through six detailed, highly realistic investigations and provides a DVD with all the data you need to follow along and practice.From binary memory dumps to log files, this DVD's intrusion data was generated by attacking live systems using the same tools and methods real-world attackers use. The evidence was then captured and analyzed using the same tools the authors employ in their own investigations. This book relies heavily on open source tools, so you can perform virtually every task without investing in any commercial software.You'll investigate environments ranging from financial institutions to software companies and crimes ranging from intellectual property theft to SEC violations. As you move step by step through each investigation, you'll discover practical techniques for overcoming the challenges forensics professionals face most often.Inside, you will find in-depth information on the following areas:Responding to live incidents in both Windows and Unix environmentsDetermining whether an attack has actually occurredAssembling a toolkit you can take to the scene of a computer-related crimeAnalyzing volatile data, nonvolatile data, and files of unknown originSafely performing and documenting forensic duplicationsCollecting and analyzing network-based evidence in Windows and Unix environmentsReconstructing Web browsing, e-mail activity, and Windows Registry changesTracing domain name ownership and the source of e-mailsDuplicating and analyzing the contents of PDAs and flash memory devicesThe  accompanying  DVD  contains  several  gigabytes  of compressed  data  generated  from  actual  intrusions.  This  data  mirrors  what  analysts  might  find  in real  investigations  and  allows  the  reader  to learn  about  forensic  investigations  in a  realisticsetting.© Copyright Pearson Education. All rights reserved.