Название: Fundamentals of Digital Forensics: A Guide to Theory, Research and Applications, 3rd Edition
Автор: Joakim Kävrestad, Marcus Birath, Nathan Clarke
Издательство: Springer
Серия: Texts in Computer Science
Год: 2024
Страниц: 292
Язык: английский
Формат: pdf (true), epub
Размер: 51.5 MB
This textbook describes the theory and methodology of digital forensic examinations, presenting examples developed in collaboration with police authorities to ensure relevance to real-world practice. The coverage includes discussions on forensic artifacts and constraints, as well as forensic tools used for law enforcement and in the corporate sector. Emphasis is placed on reinforcing sound forensic thinking, and gaining experience in common tasks through hands-on exercises. This enhanced third edition describes practical digital forensics with open-source tools and includes an outline of current challenges and research directions. This book begins with setting the stage for forensics examinations by discussing the theoretical foundation that the authors regard as relevant and important for the area. This section will introduce the reader to the areas of computer forensics and the forensic methodology as well as discuss how to find and interpret certain artifacts in a Windows environment. The book will then take a more practical focus and discuss the hows and whys about some key forensic concepts. Finally, the book will provide a section with information on how to find and interpret artifacts. It should at this point be noticed that the book does not, by far, cover every single case, question, or artifact. Practical examples are rather here to serve as demonstrations of how to implement a forensically sound way of examining digital evidence and use forensic tools. Windows 10 and 11 have been used for practical examples, and they are, unless otherwise stated, accurate for both of those versions of Windows.
