Incident response & computer forensics
By: Chris Prosise, Kevin Mandia
Contributors: Mandia, Kevin
Edition: 2nd ed
Publisher: McGraw-Hill/Osborne
Published: 2003
Place of publication: New York
Language: eng
Number of pages: 507
Subjects: Computer security; Computer crimes -- Investigation; Forensic sciences
Other titles: Incident response and computer forensics
Notes: Includes index
Table of contents: value: Real-world incidents --; value: Introduction to the incident response process --; value: Preparing for incident response --; value: After detection of an incident --; value: Live Data Collection from Windows systems --; value: Live data collection from Unix systems --; value: Forensic duplication --; value: Collecting network-based evidence --; value: Evidence handling --; value: Computer system storage fundamentals --; value: Data analysis techniques --; value: Investigating Windows systems --; value: Investigating Unix systems --; value: Analyzing network traffic --; value: Investigating hacker tools --; value: Investigating routers --; value: Writing computer forensic reports -- Appendixes