File System Forensic Analysis (Paperback)
暫譯: 檔案系統取證分析 (平裝本)
Brian Carrier
- 出版商: Addison Wesley
- 出版日期: 2005-03-17
- 售價: $2,800
- 貴賓價: 9.8 折 $2,744
- 語言: 英文
- 頁數: 600
- 裝訂: Paperback
- ISBN: 0321268172
- ISBN-13: 9780321268174
-
相關分類:
Penetration-test
立即出貨 (庫存 < 3)
買這商品的人也買了...
-
C++ Primer, 3/e 中文版$980$774 -
Sun Certified Programmer & Developer for Java 2 Study Guide, 2/e$1,790$1,701 -
C++ Builder 6 完全攻略$690$587 -
$780CMMI: Guidelines for Process Integration and Product Improvement (Harcover) -
ASP.NET 程式設計徹底研究$590$466 -
C# Primer Plus 中文版 (C# Primer Plus)$680$537 -
How the Internet Works, 7/e$1,260$1,197 -
數位影像處理 (Digital Image Processing, 2/e)$820$804 -
鳥哥的 Linux 私房菜-伺服器架設篇$750$638 -
鳥哥的 Linux 私房菜─基礎學習篇增訂版$560$476 -
CCNA Self-Study: Interconnecting Cisco Network Devices (ICND) 640-811, 640-801, 2/e$2,210$2,100 -
JSP 2.0 技術手冊$750$593 -
Windows 程式設計使用 MFC (Programming Windows with MFC, 2/e)$990$782 -
ASP.NET 徹底研究進階技巧─高階技巧與控制項實作$650$507 -
CSS 網頁設計師手札 (The CSS Anthology 101 Essential Tips, Tricks & Hacks)$450$383 -
Operating System Principles, 7/e(IE) (美國版ISBN:0471694665-Operating System Concepts, 7/e) (平裝)$1,100$1,078 -
Sniffer Pro 網路最佳化與故障排除手冊$580$452 -
ASP.NET 私房書$399$339 -
Linux iptables 技術實務─防火牆、頻寬管理、連線管制$620$527 -
Web CSS 網頁樣式設計學 (Cascading Style Sheets Standard Design Guide)$580$452 -
Java 2 全方位學習(J2SE 5.0 增修版)$750$593 -
Shell Programming 333 個應用範例技巧大全集$560$437 -
Head First Servlets & JSP:SCWCD 專業認證指南 (Head First Servlets & JSP)$880$748 -
計算機組織與設計 (Computer Organization and Design: The Hardware/Software Interface, 3/e)$680$646 -
深入淺出 Java 程式設計, 2/e (Head First Java, 2/e)$880$695
商品描述
Table of Contents:
Foreword.
Preface.
Acknowledgments.
I. FOUNDATIONS.
1. Digital Investigation Foundations.
Digital Investigations and Evidence.
Digital Crime Scene Investigation Process.
Data Analysis.
Overview of Toolkits.
Summary.
Bibliography.
2. Computer Foundations.
Data Organization.
Booting Process.
Hard Disk Technology.
Summary.
Bibiography.
3. Hard Disk Data Acquisition.
Introduction.
Reading the Source Data.
Writing the Output Data.
A Case Study Using dd.
Summary.
Bibliography.
II. VOLUME ANALYSIS.
4. Volume Analysis.
Introduction.
Background.
Analysis Basics.
Summary.
5. PC-based Partitions.
DOS Partitions.
Analysis Considerations.
Apple Partitions.
Removable Media.
Bibliography 109
6. Server-based Partitions.
BSD Partitions.
Sun Solaris Slices.
GPT Partitions.
Summary 145
Bibliography 145
7. Multiple Disk Volumes.
RAID.
Disk Spanning.
Bibliography.
III. FILE SYSTEM ANALYSIS.
8. File System Analysis.
What Is a File System?.
File System Category.
Content Category.
Metadata Category.
File Name Category.
Application Category.
Application-level Search Techniques.
Specific File Systems.
Summary.
Bibliography.
9. FAT Concepts and Analysis.
Introduction.
File System Category.
Content Category.
Metadata Category.
File Name Category.
The Big Picture.
Other Topics.
Summary.
Bibliography.
10. FAT Data Structures.
Boot Sector.
FAT32 FSINFO.
FAT.
Directory Entries.
Long File Name Directory Entries.
Summary.
Bibliography.
11. NTFS Concepts.
Introduction.
Everything is a File.
MFT Concepts.
MFT Entry Attribute Concepts.
Other Attribute Concepts.
Indexes.
Analysis Tools.
Summary.
Bibliography.
12. NTFS Analysis.
File System Category.
Content Category.
Metadata Category.
File Name Category.
Application Category.
The Big Picture.
Other Topics.
Summary.
Bibliography.
13. NTFS Data Structures.
Basic Concepts.
Standard File Attributes.
Index Attributes and Data Structures.
File System Metadata Files.
Summary.
Bibliography.
14. Ext2 and Ext3 Concepts and Analysis.
Introduction.
File System Category.
Content Category.
Metadata Category.
File Name Category.
Application Category.
The Big Picture.
Other Topics.
Summary.
Bibliography.
15. Ext2 and Ext3 Data Structures.
Superblock.
Group Descriptor Tables.
Block Bitmap.
Inodes.
Extended Attributes.
Directory Entry.
Symbolic Link.
Hash Trees.
Journal Data Structures.
Summary.
Bibliography.
16. UFS1 and UFS2 Concepts and Analysis.
Introduction.
File System Category.
Content Category.
Metadata Category.
File Name Category.
The Big Picture.
Other Topics.
Summary.
Bibliography.
17. UFS1 and UFS2 Data Structures.
UFS1 Superblock.
UFS2 Superblock.
Cylinder Group Summary.
UFS1 Group Descriptor.
UFS2 Group Descriptor.
Block and Fragment Bitmaps.
UFS1 Inodes.
UFS2 Inodes.
UFS2 Extended Attributes.
Directory Entries.
Summary.
Bibliography.
Appendix A. The Sleuth Kit and Autopsy.
The Sleuth Kit.
Autopsy.
Bibliography.
Index.
商品描述(中文翻譯)
目錄:
前言
序言
致謝
I. 基礎
1. 數位調查基礎
數位調查與證據
數位犯罪現場調查流程
數據分析
工具包概述
總結
參考文獻
2. 計算機基礎
數據組織
開機過程
硬碟技術
總結
參考文獻
3. 硬碟數據獲取
介紹
讀取源數據
寫入輸出數據
使用 dd 的案例研究
總結
參考文獻
II. 卷分析
4. 卷分析
介紹
背景
分析基礎
總結
5. 基於 PC 的分區
DOS 分區
分析考量
Apple 分區
可移動媒體
參考文獻 109
6. 基於伺服器的分區
BSD 分區
Sun Solaris 切片
GPT 分區
總結 145
參考文獻 145
7. 多磁碟卷
RAID
磁碟跨越
參考文獻
III. 檔案系統分析
8. 檔案系統分析
什麼是檔案系統?
檔案系統類別
內容類別
元數據類別
檔案名稱類別
應用程式類別
應用程式層級搜尋技術
特定檔案系統
總結
參考文獻
9. FAT 概念與分析
介紹
檔案系統類別
內容類別
元數據類別
檔案名稱類別
大局觀
其他主題
總結
參考文獻
10. FAT 數據結構
開機區
FAT32 FSINFO
FAT
目錄項目
長檔名目錄項目
總結
參考文獻
11. NTFS 概念
介紹
一切皆檔案
MFT 概念
MFT 項目屬性概念
其他屬性概念
索引
