Fundamentals of Digital Forensics : A Guide to Theory, Research and Applications / by Joakim Kävrestad, Marcus Birath, Nathan Clarke.

Format:

Book

Author/Creator:

Kävrestad, Joakim.

Contributor:

Birath, Marcus.

Clarke, Nathan.

Series:

Texts in Computer Science, 1868-095X

Language:

English

Subjects (All):

Data protection.

Forensic sciences.

Computer vision.

Criminology.

Data and Information Security.

Forensic Science.

Computer Vision.

Crime Control and Security.

Local Subjects:

Data and Information Security.

Forensic Science.

Computer Vision.

Crime Control and Security.

Physical Description:

1 online resource (292 pages)

Edition:

3rd ed. 2024.

Place of Publication:

Springer Nature 2024

Summary:

This practical and accessible textbook/reference describes the theory and methodology of digital forensic examinations, presenting examples developed in collaboration with police authorities to ensure relevance to real-world practice. The coverage includes discussions on forensic artifacts and constraints, as well as forensic tools used for law enforcement and in the corporate sector. Emphasis is placed on reinforcing sound forensic thinking, and gaining experience in common tasks through hands-on exercises. This enhanced third edition describes practical digital forensics with open-source tools and includes an outline of current challenges and research directions. Topics and features: Outlines what computer forensics is, and what it can do, as well as what its limitations are Discusses both the theoretical foundations and the fundamentals of forensic methodology Reviews broad principles that are applicable worldwide Explains how to find and interpret several important artifacts Describes free and open-source software tools Features content on corporate forensics, ethics, SQLite databases, triage, and memory analysis Includes new supporting video lectures on YouTube This easy-to-follow primer is an essential resource for students of computer forensics, and will also serve as a valuable reference for practitioners seeking instruction on performing forensic examinations. Joakim Kävrestad is a lecturer and researcher at Jönköping School of Engineering, Sweden, and an AccessData Certified Examiner. He also serves as a forensic consultant, with several years of experience as a forensic expert with the Swedish police. Marcus Birath is an adjunct senior lecturer in informatics at the University of Skövde. Nathan Clarke is a Professor of Cyber Security and Digital Forensics at the University of Plymouth. He is also an adjunct Professor at Edith Cowan University, Western Australia.

Contents:

Part I: Theory

1. What Is Digital Forensics?

2. Ethics and Integrity

Computer Theory

3. Notable Artifacts

4. Decryption and Password Enforcing

Part II: The Forensic Process

5. Cybercrime, Cyber-Aided Crime and Digital Evidence

6. Incident Response

Collecting Evidence

7. Triage

Analyzing Data and Writing Reports

Part III: Get Practical

8. Collecting Data

9. Indexing and Searching

Cracking

10. Finding Artifacts

11. Some Common Questions and Tasks

12. FTK Specifics

13. Open-Source or Freeware Tools

Part IV: Memory Forensics

14. Memory Analysis

Memory Analysis Tools

15. Memory Analysis in Criminal Investigations

16. Malware Analysis.

Notes:

Description based on publisher supplied metadata and other sources.

ISBN:

3-031-53649-5

OCLC:

1427736682