A Practical Guide to Computer Forensics Investigations

by Darren R. Hayes

All you need to know to succeed in digital technical and investigative skills, in one book Complete, practical, and up-to-date Thoroughly covers digital forensics for Windows, Mac, mobile, hardware, and networks Addresses online and lab investigations, documentation, admissibility, and more By Dr. Darren Hayes, founder of Pace University's Code Detectives forensics lab-one of America's "Top 10 Computer Forensics Professors" Perfect for anyone pursuing a digital forensics career or working with examiners Criminals go where the money is. Today, trillions of dollars of assets are digital, and digital crime is growing fast. In response, demand for digital forensics experts is soaring. To succeed in this exciting field, you need strong technical and investigative skills. In this guide, one of the world's leading computer orensics experts teaches you all the skills you'll need. Writing for students and professionals at all levels, Dr. Darren Hayes presents complete best practices for capturing and analyzing evidence, protecting the chain of custody, documenting investigations, and scrupulously adhering to the law, so your evidence can always be used. Hayes introduces today's latest technologies and technical challenges, offering detailed coverage of crucial topics such as mobile forensics, Mac forensics, cyberbullying, and child endangerment. This guide's practical activities and case studies give you hands-on mastery of modern digital forensics tools and techniques. Its many realistic examples reflect the author's extensive and pioneering work as a forensics examiner in both criminal and civil investigations. Understand what computer forensics examiners do, and the types of digital evidence they work with Explore Windows and Mac computers, understand how their features affect evidence gathering, and use free tools to investigate their contents Extract data from diverse storage devices Establish a certified forensics lab and implement good practices for managing and processing evidence Gather data and perform investigations online Capture Internet communications, video, images, and other content Write comprehensive reports that withstand defense objections and enable successful prosecution Follow strict search and surveillance rules to make your evidence admissible Investigate network breaches, including dangerous Advanced Persistent Threats (APTs) Retrieve immense amounts of evidence from smartphones, even without seizing them Successfully investigate financial fraud performed with digital devices Use digital photographic evidence, including metadata and social media images

528 pages, Kindle Edition

First published December 13, 2012

Reviews

[Ali · Rating 4 out of 5]

قرات الكتاب واستفدت الكثير من المعلومات الرائعة الغير تقنية عن المجال. يوجد هناك عدد كبير من الكتب عن التحقيق الجنائي الرقمي بمختلف مستوياته ولكن كلها تنقص المعلومات النظرية والجوانب القانونية. الكتاب سرد أسماء المنظمات العالمية والمصادر الغير تقنيه والتي تخص المجال بشكل مباشر. المواضيع التقنية البحته لا تشكل اي عائق في تعلمها فهناك الكثير من الكورسات ولكن ما يجب ان تبحث عنه هي تلك المعلومات التي تعطيك نظره عامه عن المجال من وجهة نظر جنائية. هناك فصل كامل لجزئية قبول الأدلة في المحكمة “Admissibility of Digital Evidence” بالرغم ان الفصل كان يخص القضاء الأمريكي ولكنه في غاية الأهمية. كان هناك عدد جيد من القصص والـ Case Study والتي هي ايضا جزء يجب على كل متخصص في المجال ان يركز عليه ويقرا الكثير منهم ليعرف الجوانب الغير تقنية والتي تخص المجال خاصة اذا كان يعمل مع جهات حكومية.

الكتاب ضعيف من الناحية التقنية على الاقل بالنسبة للمهتمين في المجال، كان هناك سرد لأسماء الأدوات ومقدمة عن المواضيع بشكل سريع ولم يتم ذكر التفاصيل والتي في الاغلب كلها اعرفها، لذلك الكتاب من ناحية المعلومات التقنية لأشخاص متخصصين ومهتمين في المجال غير مفيد بشكل كبير. في حالة كنت لا تملك اي خبرة سابقة ولم تقرا وتتطلع من قبل عن المجال فالكتاب يعتبر افضل كتاب من الممكن ان تبدا به على الإطلاق.

[Cyndi · Rating 5 out of 5]

Very practical guide indeed.

I found this guide helpful and not esoteric. It definitely gave me the basics I needed for my degree. I only wish a more recent edition was available. I think this went with one of the better classes in my program. I am seeing if I can implement this at work since forensics is a popular subject. The only problem with the book is that it didn't have newer systems. The examples and case studies provided were very helpful and the book has useful projects that activate the learning of the text. This is great for class.

[David · Rating 5 out of 5]

A very good book on computer forensics. It is probably the most current book I have read recently and has some terrific examples and case activities for learning.

[Alex Akpodiete, JD, PMP · Rating 5 out of 5]

Very thorough