Skip to:Content
|
Bottom
Cover image for Digital forensics with open source tools / Cory Altheide, Harlan Carvey
Title:
Digital forensics with open source tools / Cory Altheide, Harlan Carvey
Personal Author:
Publication Information:
Burlington, MA : Syngress, c2011
Physical Description:
xvii, 264 p. : ill. ; 24 cm.
ISBN:
9781597495868
Added Author:

Available:*

Library
Item Barcode
Call Number
Material Type
Item Category 1
Status
Searching...
30000010257935 HV8079.C65 A48 2011 Open Access Book Book
Searching...
Searching...
30000010257936 HV8079.C65 A48 2011 Open Access Book Book
Searching...

On Order

Summary

Summary

Digital Forensics with Open Source Tools is the definitive book on investigating and analyzing computer systems and media using open source tools. The book is a technical procedural guide, and explains the use of open source tools on Mac, Linux and Windows systems as a platform for performing computer forensics. Both well-known and novel forensic methods are demonstrated using command-line and graphical open source computer forensic tools for examining a wide range of target systems and artifacts.

Written by world-renowned forensic practitioners, this book uses the most current examination and analysis techniques in the field. It consists of 9 chapters that cover a range of topics such as the open source examination platform; disk and file system analysis; Windows systems and artifacts; Linux systems and artifacts; Mac OS X systems and artifacts; Internet artifacts; and automating analysis and extending capabilities. The book lends itself to use by students and those entering the field who do not have means to purchase new tools for different investigations.

This book will appeal to forensic practitioners from areas including incident response teams and computer forensic investigators; forensic technicians from legal, audit, and consulting firms; and law enforcement agencies.


Author Notes

Cory Altheide is a Security Engineer at Google, focused on forensics and incident response. Prior to returning to Google, Cory was a principal consultant with MANDIANT, an information security consulting firm that works with the Fortune 500, the defense industrial base and the banks of the world to secure their networks and combat cyber-crime. In this role he responded to numerous incidents for a variety of clients. Cory has authored several papers for the computer forensics journal Digital Investigation and was a contributing author for UNIX and Linux Forensic Analysis (2008) & The Handbook Of Digital Forensics and Investigation (2010). Additionally, Cory is a recurring member of the program committee of the Digital Forensics Research Workshop (DFRWS).

Harlan Carvey is a senior information security researcher with the Dell SecureWorks Counter Threat Unit - Special Ops (CTU-SO) team, where his efforts are focused on targeted threat hunting, response, and research. He continues to maintain a passion and focus in analyzing Windows systems, and in particular, the Windows Registry.

Harlan is an accomplished author, public speaker, and open source tool author. He dabbles in other activities, including home brewing and horseback riding. As a result, he has become quite adept at backing up and parking a horse trailer.

Harlan earned a bachelor's degree in electrical engineering from the Virginia Military Institute, and a master's degree in the same discipline from the Naval Postgraduate School. He served in the United States Marine Corps, achieving the rank of captain before departing the service. He resides in Northern Virginia with his family.


Table of Contents

Chapter 1 Digital Forensics with Open Source Tools
Chapter 2 The Open Source Examination Platform
Chapter 3 Disk and File System Analysis
Chapter 4 Windows Systems and Artifacts
Chapter 5 Linux Systems and Artifacts
Chapter 6 Mac OS X Systems and Artifacts
Chapter 7 Internet Artifacts
Chapter 8 File Analysis
Chapter 9 Automating Analysis and Extending Capabilities
Appendix A Free, Non-Open Tools of Note
Go to:Top of Page