Hacking Exposed Computer Forensics, Third Edition Secrets & Solutions

The most comprehensive and current computer forensics handbook explains today’s leading tools and investigation techniques.

Hacking Exposed Computer Forensics, Third Edition reveals how to identify and investigate computer crimes of all types, and explains how to construct a high-tech forensics lab, collect prosecutable evidence, discover email and system file clues, track wireless activity, and recover obscured documents. You’ll learn how to recreate the path of the attacker, access a variety of devices, gather evidence, communicate with attorneys about their investigations, and prepare reports.

In addition to a top-down update of the content, the book features several all-new chapters on the topics of cloud forensics, malware analysis, and laws and regulations in the European Union. The Hacking Exposed brand is synonymous with practical get-the-job-done tips for security practitioners. Threats to information security are more virulent today than ever before—this new edition is an essential read for information security professionals who must successfully troubleshoot the newest, toughest digital forensics cases ever seen.

• Features three completely new chapters on cloud forensics, malware analysis, and laws and regulations in the European Union with information on data restrictions concerning international investigations
• Explains how to restore deleted documents, partitions, user activities, and file systems
• Details techniques for unlocking clues stored in mobile devices
• Covers how to analyze evidence gathered from Windows, Linux, and Mac systems

Brief TOCPART 1: Fundamentals1. The Forensics Process2. Computer Fundamentals3. Forensic Lab Environment PreparationPART 2: Collecting the Evidence4. Forensically Sound Evidence Collection5. Enterprise Forensic CollectionsPART 3: Forensic Analysis6. Malware7. Microsoft Windows Systems Analysis8. Linux Analysis9. Macintosh Analysis10. Cloud Analysis11. Memory Analysis12. Defeating Anti-forensic Techniques13. Enterprise Server and Storage Analysis14. Email Analysis15. Internet History Analysis16. Mobile Forensics PART 4: Presenting Your Findings17. Documenting the Investigation18. Investigations in the US Legal System 19. Investigations in the Euro Legal System 20. Investigations between Legal SystemsPART 5: Advanced Forensics21. External Device Analysis 22. Tracking the Cloud23. Enterprise Networks24. Server Side Application Forensics25. Source Code AnalysisApp A: Searching Techniques