Practical Forensic Imaging

Securing Digital Evidence with Linux Tools

Nonfiction, Computers, Networking & Communications, Computer Security, Operating Systems, Application Software
Cover of the book Practical Forensic Imaging by Bruce Nikkel, No Starch Press
View on Amazon View on AbeBooks View on Kobo View on B.Depository View on eBay View on Walmart
Author: Bruce Nikkel ISBN: 9781593278007
Publisher: No Starch Press Publication: September 1, 2016
Imprint: No Starch Press Language: English
Author: Bruce Nikkel
ISBN: 9781593278007
Publisher: No Starch Press
Publication: September 1, 2016
Imprint: No Starch Press
Language: English

Forensic image acquisition is an important part of postmortem incident response and evidence collection. Digital forensic investigators acquire, preserve, and manage digital evidence to support civil and criminal cases; examine organizational policy violations; resolve disputes; and analyze cyber attacks.

Practical Forensic Imaging takes a detailed look at how to secure and manage digital evidence using Linux-based command line tools. This essential guide walks you through the entire forensic acquisition process and covers a wide range of practical scenarios and situations related to the imaging of storage media.

You’ll learn how to:
–Perform forensic imaging of magnetic hard disks, SSDs and flash drives, optical discs, magnetic tapes, and legacy technologies
–Protect attached evidence media from accidental modification
–Manage large forensic image files, storage capacity, image format conversion, compression, splitting, duplication, secure transfer and storage, and secure disposal
–Preserve and verify evidence integrity with cryptographic and piecewise hashing, public key signatures, and RFC-3161 timestamping
–Work with newer drive and interface technologies like NVME, SATA Express, 4K-native sector drives, SSHDs, SAS, UASP/USB3x, and Thunderbolt
–Manage drive security such as ATA passwords; encrypted thumb drives; Opal self-encrypting drives; OS-encrypted drives using BitLocker, FileVault, and TrueCrypt; and others
–Acquire usable images from more complex or challenging situations such as RAID systems, virtual machine images, and damaged media

With its unique focus on digital forensic acquisition and evidence preservation, Practical Forensic Imaging is a valuable resource for experienced digital forensic investigators wanting to advance their Linux skills and experienced Linux administrators wanting to learn digital forensics. This is a must-have reference for every digital forensics lab.

View on Amazon View on AbeBooks View on Kobo View on B.Depository View on eBay View on Walmart

Forensic image acquisition is an important part of postmortem incident response and evidence collection. Digital forensic investigators acquire, preserve, and manage digital evidence to support civil and criminal cases; examine organizational policy violations; resolve disputes; and analyze cyber attacks.

Practical Forensic Imaging takes a detailed look at how to secure and manage digital evidence using Linux-based command line tools. This essential guide walks you through the entire forensic acquisition process and covers a wide range of practical scenarios and situations related to the imaging of storage media.

You’ll learn how to:
–Perform forensic imaging of magnetic hard disks, SSDs and flash drives, optical discs, magnetic tapes, and legacy technologies
–Protect attached evidence media from accidental modification
–Manage large forensic image files, storage capacity, image format conversion, compression, splitting, duplication, secure transfer and storage, and secure disposal
–Preserve and verify evidence integrity with cryptographic and piecewise hashing, public key signatures, and RFC-3161 timestamping
–Work with newer drive and interface technologies like NVME, SATA Express, 4K-native sector drives, SSHDs, SAS, UASP/USB3x, and Thunderbolt
–Manage drive security such as ATA passwords; encrypted thumb drives; Opal self-encrypting drives; OS-encrypted drives using BitLocker, FileVault, and TrueCrypt; and others
–Acquire usable images from more complex or challenging situations such as RAID systems, virtual machine images, and damaged media

With its unique focus on digital forensic acquisition and evidence preservation, Practical Forensic Imaging is a valuable resource for experienced digital forensic investigators wanting to advance their Linux skills and experienced Linux administrators wanting to learn digital forensics. This is a must-have reference for every digital forensics lab.

More books from No Starch Press

Cover of the book Arduino Playground by Bruce Nikkel
Cover of the book Metasploit by Bruce Nikkel
Cover of the book iOS Application Security by Bruce Nikkel
Cover of the book The Arduino Inventor's Guide by Bruce Nikkel
Cover of the book The Rust Programming Language (Covers Rust 2018) by Bruce Nikkel
Cover of the book The Manga Guide to Regression Analysis by Bruce Nikkel
Cover of the book The Principles of Object-Oriented JavaScript by Bruce Nikkel
Cover of the book The Art of R Programming by Bruce Nikkel
Cover of the book Game Hacking by Bruce Nikkel
Cover of the book Realm of Racket by Bruce Nikkel
Cover of the book Beautiful LEGO by Bruce Nikkel
Cover of the book Pentesting Azure Applications by Bruce Nikkel
Cover of the book Beautiful LEGO 2: Dark by Bruce Nikkel
Cover of the book Hacking VoIP by Bruce Nikkel
Cover of the book The Smart Girl's Guide to Privacy by Bruce Nikkel
We use our own "cookies" and third party cookies to improve services and to see statistical information. By using this website, you agree to our Privacy Policy