Fully revised for the very latest EnCE exam and EnCase software
EnCE certification tells the world that you've not only mastered the use of EnCase Forensic Software, but also that you have acquired the in-depth forensics knowledge and techniques you need to conduct complex computer examinations. This official study guide, written by a law enforcement professional who is an expert in EnCE and computer forensics, provides the complete instruction, advanced testing software, and solid techniques you need to prepare for the exam.
Key topics include:
*
Understanding Computer Hardware. Understanding computer components, boot processes, partitions, and files systems, so you can explain them to a jury
*
First Response. What to do and how to follow procedures when first entering a scene
*
Acquisition of Digital Evidence. Creating EnCase boot disks; booting with EnCase boot disks; and drive-to-drive, network cable, FastBloc, Linen, and Enterprise acquisitions
*
EnCase Forensic Software Overview. Tour of EnCase environment including software, menus, and capabilities
*
Report Writing. Sample reports from real-life cases (names changed)
*
EnCase Legal Journal. Essential information on operating within the law and giving expert testimony
Look inside for complete coverage of all exam objectives.
Auflage
Sprache
Verlagsort
Verlagsgruppe
Zielgruppe
Editions-Typ
Maße
Höhe: 21.3 cm
Breite: 16.7 cm
Dicke: 12 mm
Gewicht
ISBN-13
978-0-470-18145-4 (9780470181454)
Schweitzer Klassifikation
Steve Bunting, EnCE, CCFT, is a Captain with the University of Delaware Police Department where he is responsible for computer forensics, video forensics, and investigations involving computers. With over 30 years of experience in law enforcement, Steve has conducted computer forensic examinations for local, state, and federal agencies and has testified in court on numerous occasions as a computer forensics expert. He is coauthor of Mastering Windows Network Forensics and Investigation (Sybex).
Introduction.
Assessment Test.
Chapter 1: Computer Hardware.
Chapter 2: File Systems.
Chapter 3: First Response.
Chapter 4: Acquiring Digital Evidence.
Chapter 5: EnCase Concepts.
Chapter 6: EnCase Environment.
Chapter 7: Understanding, Searching For, and Bookmarking Data.
Chapter 8: File Signature Analysis and Hash Analysis.
Chapter 9: Windows Operating System Artifacts.
Chapter 10: Advanced EnCase.
Appendix A: Creating Paperless Reports.
Appendix B: About the Companion DVD.
Glossary.
Index.
