Beschreibung:
This textbook provides an introduction to digital forensics, a rapidly evolving field for solving crimes. Beginning with the basic concepts of computer forensics, each of the book's 21 chapters focuses on a particular forensic topic composed of two parts: background knowledge and hands-on experience through practice exercises. Each theoretical or background section concludes with a series of review questions, which are prepared to test students' understanding of the materials, while the practice exercises are intended to afford students the opportunity to apply the concepts introduced in the section on background knowledge.
1 Introduction to Computer Forensics.- 2 Introduction to Computer Organization.- 3 Building a Forensics Workstation.- 4 Volume Analysis.- 5 Examining FAT File System.- 6 Deleted File Recovery in FAT.- 7 Examining NTFS File System.- 8 Deleted File Recovery in NTFS.- 9 File Carving.- 10 File Signature Searching Forensics.- 11 Keyword Forensics.- 12 Timeline Analysis.- 13 Data Hiding and Detection.- 14 Log Analysis.- 15 Android Forensics.- 16 GPS Forensics.- 17 SIM Cards Forensics.- 18 Introductory Malware Analysis.- 19 Ransomware Analysis.- 20 Image Forgery Detection.- 21 Steganography and Steganalysis.