Forensic analysis of disk-based evidence.

Format:

Video

Contributor:

Messier, Ric, presenter.

O'Reilly (Firm), publisher.

Language:

English

Subjects (All):

Computer security.

Hacking.

Computer crimes--Investigation.

Computer crimes.

Hard disks (Computer science)--Security measures.

Hard disks (Computer science).

Physical Description:

1 online resource (1 video file (2 hr., 37 min.)) : sound, color.

Edition:

[First edition].

Place of Publication:

[Place of publication not identified] : O'Reilly Media, Inc., [2017]

Summary:

Today, our information- and knowledge-based economy generates vast amounts of data that is at some point saved to storage devices, such as hard drives or solid-state drives or chips, or portable devices like USB sticks. Still and video cameras also contain cards to store images. Understanding how all of these devices are formatted and how to get data from them is critical to a forensic investigator. Both law enforcement and corporate investigators need to understand the value and techniques of searching for evidence of crime or intrusions on computer systems. Designed for people with entry- to intermediate-level knowledge of computer systems and data storage systems, this course benefits those without much practical experience in regard to digital forensics and includes instruction and demonstrations. In it, you'll see how to use SleuthKit, an open source collection of command-line tools and a C library with which you can analyze disk images. You'll learn about the main file storage architectures such as File Allocation Table (FAT), NT File System (NTFS), and ext2/3. You'll learn how to conduct basic forensic procedures to extract valuable information that could be crucial in uncovering illegal activities or revealing whether a device has been the target of an attack.

Notes:

OCLC-licensed vendor bibliographic record.

ISBN:

9781492029120

1492029122

OCLC:

1348109582