Digital Forensics with the Accessdata Forensic Toolkit (Ftk)

Sammons, John

McGraw-Hill Osborne Media（2016/04発売）

• 製本 Paperback:紙装版/ペーパーバック版
• 言語 ENG
• 商品コード 9780071845021
• DDC分類 005

Full Description

Learn how to use AccessData's Forensic Toolkit (FTK) while mastering the fundamentals of digital forensics Digital Forensics with the AccessData Forensic Toolkit (FTK) provides a comprehensive review of essential digital forensics concepts and builds on this information to teach you how to conduct digital investigations with AccessData's FTK-the industry-standard, court-accepted digital investigations platform. Part I covers the technology all digital forensics investigators need to understand, specifically data, storage media, file systems, and registry files. Part II explains how best to use FTK 5 tools, including FTK imager, FTK registry viewer, and the Password Recovery Toolkit (PRTK), to conduct legally defensible investigations. Written by a digital forensics expert and AccessData instructor Perfect self-study guide for the AccessData Certified Examiner (ACE) exam "Kit Trick" notes highlight best practices for using FTK "Case File" sidebars feature insights from actual digital forensic investigators

Contents

Chapter 1Windows Registry & File Systems Chapter 4: FTK Imager Chapter 5: FTK Examiner: Introduction and Interface Chapter 6: FTK Examiner: First Steps Chapter 7: Windows Artifacts Chapter 8: FTK Basics Chapter 9: FTK Registry Viewer Chapter 10: Password Recovery Toolkit