Get started with the art and science of digital forensics with this practical; hands-on guide!
Key Features:
- Champion the skills of digital forensics by understanding the nature of recovering and preserving digital information which is essential for legal or disciplinary proceedings
- Explore new and promising forensic processes and tools based on 'disruptive technology' to regain control of caseloads.
- Richard Boddington; with 10+ years of digital forensics; demonstrates real life scenarios with a pragmatic approach
Book Description:
Digital Forensics is a methodology which includes using various tools; techniques; and programming language. This book will get you started with digital forensics and then follow on to preparing investigation plan and preparing toolkit for investigation.
In this book you will explore new and promising forensic processes and tools based on 'disruptive technology' that offer experienced and budding practitioners the means to regain control of their caseloads. During the course of the book; you will get to know about the technical side of digital forensics and various tools that are needed to perform digital forensics. This book will begin with giving a quick insight into the nature of digital evidence; where it is located and how it can be recovered and forensically examined to assist investigators. This book will take you through a series of chapters that look at the nature and circumstances of digital forensic examinations and explains the processes of evidence recovery and preservation from a range of digital devices; including mobile phones; and other media. This book has a range of case studies and simulations will allow you to apply the knowledge of the theory gained to real-life situations.
By the end of this book you will have gained a sound insight into digital forensics and its key components.
What You Will Learn:
- Gain familiarity with a range of different digital devices and operating and application systems that store digital evidence.
- Appreciate and understand the function and capability of forensic processes and tools to locate and recover digital evidence.
- Develop an understanding of the critical importance of recovering digital evidence in pristine condition and ensuring its safe handling from seizure to tendering it in evidence in court.
- Develop an understanding of the critical importance of recovering digital evidence in pristine condition and ensuring its safe handling from seizure to tendering it in evidence in court.
- Understand the importance and challenge of digital evidence analysis and how it can assist investigations and court cases.
- Explore emerging technologies and processes that empower forensic practitioners and other stakeholders to harness digital evidence more effectively.
Who this book is for:
This book is for anyone who wants to get into the field of digital forensics. Prior knowledge of programming languages (any) will be of great help; but not a compulsory prerequisite.
Table of Contents
- The role of digital forensics and its environment
- Hardware and software environments
- The nature and special attributes of digital evidence
- Preservation of digital evidence
- Need for enhanced forensic tools
- Selecting and analysing digital evidence
- Windows and other operating systems as a source of evidence
- Examining browsers; emails; messaging systems and mobile phones
- Validating the evidence
- Empowering forensic practitioners and other stakeholders
About the Author
Richard Boddington has a police, intelligence and digital forensic background. He also has an academic background, having taught digital forensics at undergraduate and postgraduate levels at Murdoch University and the University of Western Australia, and he is an active researcher and publisher of academic papers relating to the digital forensics and eDiscovery environments.
Richard is the Team Leader of the Digital Forensic and Data Discovery Unit at TSW Analytical P/L based in Bibra Lake, providing professional digital forensic/eDiscovery services to a broad range of clients and providing expert witness testimony. He also provides seminars and training modules for information security management and forensic contingency planning.
Richard is Director of Training and Research (Global) for Xtremeforensics, a USA-based software company that has pioneered eDiscovery and digital forensic software and processes for some +20 years, providing leading tools to the law enforcement, intelligence and defence and the corporate market. Richard is responsible for training new and existing clients to master latest versions of the tools as well as assisting in the testing and enhancement of the software.
Mr Boddington holds the position of global trainer responsible for training new and existing clients to master latest versions of the tools as well as assisting in the testing and enhancement of the software. Mr Boddington is responsible for certifying those participants who complete the courses for the award of formal practitioner competence in the use and application of the forensic tools.
https://www.linkedin.com/profile/view?id=AAkAAA0Hk6ABcFUKKTEfOFJOmabKrmqGsNNPrLQ&authType=NAME_SEARCH&authToken=zLdC&locale=en_US&trk=tyah&trkInfo=clickedVertical%3Amynetwork%2CclickedEntityId%3A218600352%2CauthType%3ANAME_SEARCH%2Cidx%3A1-2-2%2CtarId%3A1445940541266%2Ctas%3ARichard%20Bodd
https://xtremeforensics.com/
http://www.tswanalytical.com.au/digital.html
http://www.igi-global.com/video/emerging-forensic-tools-locating-analyzing/134946