Fundamentals of Digital Forensics Theory, Methods, and Real-Life Applications

This hands-on textbook provides an accessible introduction to the fundamentals of digital forensics. The text contains thorough coverage of the theoretical foundations, explaining what computer forensics is, what it can do, and also what it can’t. A particular focus is presented on establishing soun...

Full description

Bibliographic Details
Main Author: Kävrestad, Joakim
Format: eBook
Language:English
Published: Cham Springer International Publishing 2018, 2018
Edition:1st ed. 2018
Subjects:
Online Access:
Collection: Springer eBooks 2005- - Collection details see MPG.ReNa
LEADER 04010nmm a2200349 u 4500
001 EB001844546
003 EBX01000000000000001008535
005 00000000000000.0
007 cr|||||||||||||||||||||
008 180802 ||| eng
020 |a 9783319963198 
100 1 |a Kävrestad, Joakim 
245 0 0 |a Fundamentals of Digital Forensics  |h Elektronische Ressource  |b Theory, Methods, and Real-Life Applications  |c by Joakim Kävrestad 
250 |a 1st ed. 2018 
260 |a Cham  |b Springer International Publishing  |c 2018, 2018 
300 |a XII, 230 p. 124 illus., 6 illus. in color  |b online resource 
505 0 |a Part I: Theory -- What is Digital Forensics? -- Cybercrime, Cyber-Aided Crime and Digital Evidence -- Computer Theory -- Notable Artifacts -- Decryption and Password Enforcing -- Collecting Evidence -- Analyzing Data and Writing Reports -- Part II: Put It to Practice -- Collecting Data -- Indexing and Searching -- Cracking -- Finding Artifacts -- Some Common Questions -- FTK Specifics -- Open Source or Freeware Tools -- Part III: Memory Forensics -- Memory Management -- Volatility -- Memory Analysis in Criminal Investigations -- Malware Analysis -- Part IV: Appendices -- Appendix A – Solutions -- Appendix B – Useful Scripts -- Appendix C – Sample Report (Template) -- Appendix D – List of Time Zones -- Appendix E – complete Jitsi Chat Log 
653 |a Computer security 
653 |a Image Processing and Computer Vision 
653 |a Cryptology 
653 |a Crime Control and Security 
653 |a Data encryption (Computer science) 
653 |a Systems and Data Security 
653 |a Public safety 
653 |a Optical data processing 
041 0 7 |a eng  |2 ISO 639-2 
989 |b Springer  |a Springer eBooks 2005- 
856 4 0 |u https://doi.org/10.1007/978-3-319-96319-8?nosfx=y  |x Verlag  |3 Volltext 
082 0 |a 005.8 
520 |a This hands-on textbook provides an accessible introduction to the fundamentals of digital forensics. The text contains thorough coverage of the theoretical foundations, explaining what computer forensics is, what it can do, and also what it can’t. A particular focus is presented on establishing sound forensic thinking and methodology, supported by practical guidance on performing typical tasks and using common forensic tools. Emphasis is also placed on universal principles, as opposed to content unique to specific legislation in individual countries.  
520 |a Topics and features: Introduces the fundamental concepts in digital forensics, and the steps involved in a forensic examination in a digital environment Discusses the nature of what cybercrime is, and how digital evidence can be of use during criminal investigations into such crimes Offers a practical overview of common practices for cracking encrypted data Reviews key artifacts that have proven to be important in several cases, highlighting where to find these and how to correctly interpret them Presents a survey of various different search techniques, and several forensic tools that are available for free Examines the functions of AccessData Forensic Toolkit and Registry Viewer Proposes methods for analyzing applications, timelining, determining the identity of the computer user, and deducing if the computer was remote controlled Describes the central concepts relating to computer memory management,  
520 |a and how to perform different types of memory analysis using the open source tool Volatility Provides review questions and practice tasks at the end of most chapters, and supporting video lectures on YouTube This easy-to-follow primer is an essential resource for students of computer forensics, and will also serve as a valuable reference for practitioners seeking instruction on performing forensic examinations in law enforcement or in the private sector. Joakim Kävrestad is a Lecturer in informatics at the University of Skövde, Sweden, with several years of experience as a forensic expert with the Swedish police