Digital Forensics Explained (Hardcover)

The field of computer forensics has experienced significant growth recently and those looking to get into the industry have significant opportunity for upward mobility. Focusing on the concepts investigators need to know to conduct a thorough investigation, Digital Forensics Explained provides an overall description of the forensic practice from a practitioner’s perspective.

Starting with an overview, the text describes best practices based on the author’s decades of experience conducting investigations and working in information technology. It illustrates the forensic process, explains what it takes to be an investigator, and highlights emerging trends. Filled with helpful templates and contributions from seasoned experts in their respective fields, the book includes coverage of:

• Internet and email investigations
• Mobile forensics for cell phones, iPads, music players, and other small devices
• Cloud computing from an architecture perspective and its impact on digital forensics
• Anti-forensic techniques that may be employed to make a forensic exam more difficult to conduct
• Recoverability of information from damaged media
• The progression of a criminal case from start to finish
• Tools that are often used in an examination, including commercial, free, and open-source tools; computer and mobile tools; and things as simple as extension cords
• Social media and social engineering forensics
• Case documentation and presentation, including sample summary reports and a cover sheet for a cell phone investigation

The text includes acquisition forms, a sequential process outline to guide your investigation, and a checklist of supplies you’ll need when responding to an incident. Providing you with the understanding and the tools to deal with suspects who find ways to make their digital activities hard to trace, the book also considers cultural implications, ethics, and the psychological effects that digital forensics investigations can have on investigators.

近年來，電腦取證領域經歷了顯著的增長，且希望進入這個行業的人有很大的晉升機會。《數位取證解析》從實務者的角度提供了對調查人員進行全面調查所需了解的概念的描述。

從概述開始，本書描述了基於作者數十年的調查和資訊技術工作經驗的最佳實踐。它說明了取證過程，解釋了成為調查人員所需的條件，並突出了新興趨勢。本書充滿了有用的範本和來自各自領域經驗豐富的專家的貢獻，包括以下內容：

- 網際網路和電子郵件調查
- 手機、iPad、音樂播放器和其他小型設備的移動取證
- 從架構角度看雲計算及其對數位取證的影響
- 可能用於使取證更加困難的反取證技術
- 從損壞媒體中恢復信息的可行性
- 刑事案件從開始到結束的進展
- 調查中常用的工具，包括商業、免費和開源工具；電腦和移動工具；以及像延長線這樣簡單的東西
- 社交媒體和社交工程取證
- 案件文件和呈現，包括樣本摘要報告和手機調查的封面頁

本書還包括取證表格、引導調查的順序流程大綱以及應對事件時所需的用品清單。它為您提供了理解和應對那些設法使其數位活動難以追蹤的嫌疑人的能力和工具，同時考慮了文化影響、倫理道德以及數位取證調查對調查人員可能產生的心理影響。