Computer Forensics: Investigation Procedures and Response (CHFI), 2/e (Paperback)

The Computer Forensic Series by EC-Council provides the knowledge and skills to identify, track, and prosecute the cyber-criminal. The series is comprised of four books covering a broad base of topics in Computer Hacking Forensic Investigation, designed to expose the reader to the process of detecting attacks and collecting evidence in a forensically sound manner with the intent to report crime and prevent future attacks. Learners are introduced to advanced techniques in computer investigation and analysis with interest in generating potential legal evidence. In full, this and the other three books provide preparation to identify evidence in computer related crime and abuse cases as well as track the intrusive hacker's path through a client system. The series and accompanying labs help prepare the security student or professional to profile an intruder's footprint and gather all necessary information and evidence to support prosecution in a court of law. The first book in the Computer Forensics series is Investigation Procedures and Response. Coverage includes a basic understanding of the importance of computer forensics, how to set up a secure lab, the process for forensic investigation including first responder responsibilities, how to handle various incidents and information on the various reports used by computer forensic investigators.

EC-Council的《電腦取證系列》提供了識別、追蹤和起訴網絡犯罪分子所需的知識和技能。該系列由四本書組成，涵蓋了計算機駭客取證調查的廣泛主題，旨在讓讀者了解在符合法醫學原則的情況下檢測攻擊並收集證據的過程，以報告犯罪並防止未來的攻擊。學習者將介紹計算機調查和分析的高級技術，並有興趣生成潛在的法律證據。總的來說，這本書和其他三本書將為識別與計算機相關的犯罪和濫用案件中的證據提供準備，並追蹤入侵駭客在客戶系統中的蹤跡。該系列和相應的實驗室幫助安全學生或專業人士分析入侵者的足跡，並收集所有必要的信息和證據，以支持在法庭上的起訴。《電腦取證系列》的第一本書是《調查程序和應對》。內容包括對計算機取證重要性的基本理解，如何建立安全實驗室，法醫調查的過程（包括第一反應者的責任），如何處理各種事件以及計算機取證調查人員使用的各種報告的信息。