Practical Forensic Imaging

Practical Forensic Imaging
Author :
Publisher : No Starch Press
Total Pages : 320
Release :
ISBN-10 : 9781593278007
ISBN-13 : 1593278004
Rating : 4/5 (004 Downloads)

Book Synopsis Practical Forensic Imaging by : Bruce Nikkel

Download or read book Practical Forensic Imaging written by Bruce Nikkel and published by No Starch Press. This book was released on 2016-09-01 with total page 320 pages. Available in PDF, EPUB and Kindle. Book excerpt: Forensic image acquisition is an important part of postmortem incident response and evidence collection. Digital forensic investigators acquire, preserve, and manage digital evidence to support civil and criminal cases; examine organizational policy violations; resolve disputes; and analyze cyber attacks. Practical Forensic Imaging takes a detailed look at how to secure and manage digital evidence using Linux-based command line tools. This essential guide walks you through the entire forensic acquisition process and covers a wide range of practical scenarios and situations related to the imaging of storage media. You’ll learn how to: –Perform forensic imaging of magnetic hard disks, SSDs and flash drives, optical discs, magnetic tapes, and legacy technologies –Protect attached evidence media from accidental modification –Manage large forensic image files, storage capacity, image format conversion, compression, splitting, duplication, secure transfer and storage, and secure disposal –Preserve and verify evidence integrity with cryptographic and piecewise hashing, public key signatures, and RFC-3161 timestamping –Work with newer drive and interface technologies like NVME, SATA Express, 4K-native sector drives, SSHDs, SAS, UASP/USB3x, and Thunderbolt –Manage drive security such as ATA passwords; encrypted thumb drives; Opal self-encrypting drives; OS-encrypted drives using BitLocker, FileVault, and TrueCrypt; and others –Acquire usable images from more complex or challenging situations such as RAID systems, virtual machine images, and damaged media With its unique focus on digital forensic acquisition and evidence preservation, Practical Forensic Imaging is a valuable resource for experienced digital forensic investigators wanting to advance their Linux skills and experienced Linux administrators wanting to learn digital forensics. This is a must-have reference for every digital forensics lab.


Practical Forensic Imaging Related Books

Practical Forensic Imaging
Language: en
Pages: 320
Authors: Bruce Nikkel
Categories: Computers
Type: BOOK - Published: 2016-09-01 - Publisher: No Starch Press

DOWNLOAD EBOOK

Forensic image acquisition is an important part of postmortem incident response and evidence collection. Digital forensic investigators acquire, preserve, and m
Practical Forensic Imaging
Language: en
Pages:
Authors: Bruce Nikkel
Categories:
Type: BOOK - Published: 2016 - Publisher:

DOWNLOAD EBOOK

Practical Forensic Digital Imaging
Language: en
Pages: 402
Authors: Patrick Jones
Categories: Law
Type: BOOK - Published: 2011-02-10 - Publisher: CRC Press

DOWNLOAD EBOOK

Well-documented scenes can prove to be invaluable pieces of evidence at trial, and the ability to take compelling photographs is a critical skill for forensic s
Forensic Imaging
Language: en
Pages: 204
Authors: Fabrice Dedouit
Categories: Medical
Type: BOOK - Published: 2022-08-11 - Publisher: Springer Nature

DOWNLOAD EBOOK

This superbly illustrated book examines all aspects of the use of modern post-mortem imaging in forensic investigations, which has flourished since the introduc
Practical Forensic Digital Imaging
Language: en
Pages: 404
Authors: Patrick Jones
Categories: Law
Type: BOOK - Published: 2011-02-10 - Publisher: CRC Press

DOWNLOAD EBOOK

Well-documented scenes can prove to be invaluable pieces of evidence at trial, and the ability to take compelling photographs is a critical skill for forensic s