Full Description
Digital InvestigationsEvidence focuses on the examination phase of a digital investigation. It reviews the technical skills of digital forensics and how to locate and acquire forensic artifacts on Windows systems, emails and file systems. The book also covers critical skills lacking in other works, including how to handle a digital crime scene and the forensic process for computer systems. In addition, it answers what to do and how to handle gathered evidence during investigations. The text includes labs to teach technical skills, such as data recovery, evidence identification, forensic timelines, etc. Digital forensics is a crucial science. We are currently at the point where we use technology to support our lifestyle. Soon we will enter an age where technology supplements it. An age where our car will send us an email to remind us it has checked our calendar and booked an oil change at a shop a mile from our house. Where we can view a webcam on our phones to see that grandma is ringing the doorbell.
Contents
1. Computer Basics for Digital Investigations and First Responders2. Applying Forensic Science to Digital Investigations3. Handling the Digital Crime Scene4. Disk and Data Recovery5. Forensic Iconalysis6. Forensic Examination of Windows Systems7. Forensic Examination of Macintosh and Unix/Linux Systems8. Forensic Examination of Mobile Devices9. Forensic Examination of Networks10. Forensic Examination of Email11. Indicators of Compromise12. Investigation of Computer Intrusions13. Investigation of Child Exploitation14. Investigation of Cyberstalking15. Digital Evidence as an Alibi
