Practical Forensic Imaging: Securing Digital Evidence with Linux Tools 1st Edition

Book Name: Practical Forensic Imaging: Securing Digital Evidence with Linux Tools 1st Edition
Author: Bruce Nikkel
Publisher: No Starch Press
ISBN: 1593277938
Year: 2016
Pages: 320
Language: English
File format: PDF

Practical Forensic Imaging: Securing Digital Evidence with Linux Tools 1st Edition Pdf Book Description:

Enforcement image acquisition is also an significant part postmortem event response and evidence set. Digital forensic investigators develop, conserve, and handle digital proof to support criminal and civil cases; analyze organizational policy offenses; solve disputes; and examine cyber attacks.

Practical Forensic Imaging requires a thorough look at how to protect and handle digital signs utilizing Linux-based command line tools. This critical guide walks you through the whole forensic acquisition procedure and covers a vast assortment of practical situations and scenarios about the imaging of storage websites.

–Shield attached evidence networking from accidental alteration
–Handle big forensic picture documents, storage capability, image format conversion, compression, splitting, duplication, secure storage and transfer, and secure disposal
–Preserve and confirm evidence ethics together with cryptographic and piecewise hashing, public Important signatures, and RFC-3161 timestamping
–operate with newer interface and drive technologies such as NVME, SATA Express, 4K-native industry drives, SSHDs, SAS, UASP/USB3x, and Thunderbolt
–Handle drive safety like ATA passwords; encoded thumb drives; Opal self-encrypting drives; OS-encrypted drives with BitLocker, FileVault, and TrueCrypt; along with others
–Acquire usable pictures from more complicated or challenging situations like RAID systems, virtual machine graphics, and damaged websites

With its distinctive focus on electronic forensic acquisition and evidence preservation, Practical Forensic Imaging is a valuable source for seasoned digital forensic researchers wanting to progress their Linux skills and skilled Linux administrators wishing to learn electronic forensics. This really is a must-have benchmark for every single digital forensics laboratory.