Practical Forensic Imaging Sécurisation des preuves Digital avec les Tools Linux

  • en
  • Broché
  • 9781593277932
  • 01 septembre 2016
  • 320 pages
Toutes les spécifications de l'article

Résumé

Forensic image acquisition is an important part of post-mortem incident response and evidence collection. Digital forensic investigators acquire, preserve, and manage digital evidence to support civil and criminal cases, examine organizational policy violations, resolve disputes, and analyze cyber attacks. Practical Forensic Imaging takes a detailed look at how to secure and manage digital evidence using Linux-based command line tools. This essential guide walks you through the entire forensic acquisition process and covers a wide range of practical scenarios and situations related to the imaging of storage media.

You'll learn how to:
  • Use Linux and command line tools to perform to forensic imaging of magnetic hard disks, SSD and flash, optical discs, magnetic tapes, and legacy technologies.
  • Protect attached evidence media from accidental alteration and modification by using hardware and software write blockers, and ensuring read-only access.
  • Manage large forensic image files, storage capacity planning, image format conversion, compression, splitting, duplication, secure transfer and storage, and secure disposal.
  • Preserve and verify evidence integrity with cryptographic hashing and piece-wise hashing, public key signatures, and RFC-3161 time-stamping.
  • Work with new drive and interface technologies such as NVME, SATA Express, 4K-native sector drives, Hybrid SSDs, SAS, UASP/USB3x, Thunderbolt, and more.
  • Manage drive security such as ATA passwords, encrypted thumb drives, Opal self encrypting drives, Bitlocker, FileVault, Truecrypt, and others.
  • Acquire usable images from more complex or challenging situations such as RAID systems, virtual machine images, and damaged media.
With its unique focus on digital forensic acquisition and evidence preservation, Practical Forensic Imaging is a valuable resource for experienced digital forensic investigators wanting to advance their Linux skills, and experienced Linux administrators wanting to learn digital forensics. This is a must have reference for every digital forensics lab.

Spécifications produit

Contenu

Langue
en
Binding
Broché
Date de sortie initiale
01 septembre 2016
Nombre de pages
320
Illustrations
Avec illustrations

Personnes impliquées

Auteur principal
Bruce Nikkel
Editeur principal
No Starch Press,Us

Autres spécifications

Hauteur de l'emballage
234 mm
Hauteur du produit
20 mm
Largeur d'emballage
178 mm
Largeur du produit
175 mm
Livre d‘étude
Non
Longueur d'emballage
234 mm
Longueur du produit
231 mm
Poids de l'emballage
590 g
Police de caractères extra large
Non

EAN

EAN
9781593277932
Pas encore d'avis

Choisissez la version souhaitée

Informations sur les prix et commande

Le prix de ce produit est de 41 euros et 99 cents.
Au plus tard le 29 mai chez vous
Vendu par bol
  • Livraison comprise avec bol
  • Retrait possible dans un point-relais bol
  • 30 jours de réflexion et retour gratuit
  • Service client 24h/24

Souvent achetés ensemble