
CHFI Computer Hacking Forensic Investigator Certification All-in-One Exam Guide
Description
Alles über E-Books | Antworten auf Fragen rund um E-Books, Kopierschutz und Dateiformate finden Sie in unserem Info- & Hilfebereich.
More details
Other editions
Additional editions

Content
- Cover
- Title
- Copyright Page
- Dedication
- About the Author
- Contents at a Glance
- Contents
- Acknowledgments
- Introduction
- Chapter 1 Computer Forensics Today
- So What Is This Computer Forensics Business Anyway?
- The History of Computer Forensics
- Objectives and Benefits
- Corporate vs. Criminal Investigations
- The Forensics Investigator
- Chapter Review
- Questions
- Answers
- References
- Chapter 2 The Nature of Digital Evidence
- What Is Digital Evidence?
- Anti-Digital Forensics
- Locard's Exchange Principle
- Federal Rules of Evidence (FRE)
- Computer-Generated vs. Computer-Stored Records
- Essential Data
- Best Evidence
- International Principles of Computer Evidence
- International Organization on Computer Evidence
- Scientific Working Group on Digital Evidence
- Evidence Collection
- IOCE Guidelines for Recovering Digital Forensic Evidence
- The Scientific Method
- Consider a Scenario
- Exculpatory Evidence
- Chapter Review
- Questions
- Answers
- References
- Chapter 3 The Investigation Process
- The Process Is Key
- Overview
- Before the Investigation
- Preparing the Investigation
- Seizing the Evidence
- Analyzing the Evidence
- Reporting and Testifying
- Chapter Review
- Questions
- Answers
- References
- Chapter 4 Computer Forensics Labs
- What Services Are You Offering?
- Staffing Requirements and Planning
- Becoming Certified
- Setting Up Your Lab
- Physical Location Needs
- Software Requirements
- Hardware Requirements
- Field Tools
- Lab Hardware
- Other Considerations
- Chapter Review
- Questions
- Answers
- References
- Chapter 5 Getting the Goods
- Searching and Seizing Computers
- Is Your Search and Seizure Unwarranted?
- You Have a Warrant
- Electronic Surveillance
- Post-seizure Issues
- First Responder Procedures
- First on the Scene
- Managing the Crime Scene
- Collecting and Transporting the Evidence
- Collecting and Preserving Electronic Evidence
- The Crime Scene Report
- A Checklist for First Responders
- Data Acquisition and Duplication
- Data Acquisition: A Definition
- Static vs. Live Acquisition
- Validating the Acquisition
- Acquisition Issues: SSDs, RAID, and Cloud
- Concepts in Practice: Data Acquisition Software and Tools
- Chapter Review
- Questions
- Answers
- References
- Chapter 6 Spinning Rust
- Disk Drives and File Systems
- Everything You Wanted to Know About Disk Drives
- File Systems
- Getting the Boot
- Booting from a Live CD
- Recovering Deleted Files and Partitions
- Recovering Disk Partitions
- Recovering File Systems and Files
- Theory into Practice: File and Partition Recovery Tools
- Steganography and Graphics File Formats
- Graphics Files
- Steganography
- Theory into Practice: Graphics File Tools and Steganography Detection Tools
- Chapter Review
- Questions
- Answers
- References
- Chapter 7 Windows Forensics
- Windows Forensics Analysis
- Live Investigations: Volatile Information
- Live Investigations: Nonvolatile Information
- Forensic Investigation of a Windows System
- Windows Log Analysis
- Windows Password Storage
- Theory into Practice: Forensics Tools for Windows
- Cracking Passwords
- Passwords: The Good, the Bad, and the Ugly
- Password-Cracking Types
- Theory into Practice: Password-Cracking Tools
- Chapter Review
- Questions
- Answers
- References
- Chapter 8 Forensic Investigations
- Forensic Investigations
- Installation and Configuration
- Creating the Case and Adding Data
- Analyzing the Data
- Generating the Report
- Choosing the Proper Forensic Software
- Forensic Investigations Using FTK
- Installation and Configuration
- Creating the Case and Adding Data
- Analyzing the Data
- Generating the Report
- Forensic Investigations Using EnCase
- Installation and Configuration
- Creating the Case and Adding Data
- Analyzing the Data
- Generating the Report
- So Did We Get the Evidence We Need?
- Which One to Choose?
- Chapter Review
- Questions
- Answers
- References
- Chapter 9 Network Forensics
- Network Forensics: A Definition
- Network Forensics and Wired Networks
- Investigating Network Traffic
- Network Forensics: Attack and Defend
- Network Security Monitoring
- Theory into Practice: Network Forensic Tools
- Network Forensics and Wireless Networks
- What's Different About Wireless?
- The Saga of Wireless Encryption
- Investigating Wireless Attacks
- Theory into Practice: Wireless Forensic Tools
- Log Capturing and Event Correlation
- Logs, Logs, Logs
- Legal Issues and Logging
- Synchronizing Time
- SIM, SEM, SIEM-Everybody Wants One
- Theory into Practice: Log Capturing and Analysis Tools
- Chapter Review
- Questions
- Answers
- References
- Chapter 10 Mobile Forensics
- Cellular Networks
- Cellular Data
- Mobile Devices
- PDAs
- Plain Ol' Cell Phones
- Music Players (Personal Entertainment Devices)
- Smart Phones
- Tablets and Phablets
- What Can Criminals Do with Mobile Phones?
- Retrieving the Evidence
- Challenges in Mobile Forensics
- Precautions to Take Before Investigating
- The Process in Mobile Forensics
- Theory into Practice: Mobile Forensic Tools
- Chapter Review
- Questions
- Answers
- References
- Chapter 11 Attacking Applications
- Web-based Attacks
- Web Applications: A Definition
- Mounting the Attack
- Web Applications: Attack and Defend
- Web Tools
- Follow the Logs
- Investigating the Breach
- E-mail Attacks
- E-mail Architecture
- E-mail Crimes
- Laws Regarding E-mail
- E-mail Headers and Message Structure
- E-mail Investigation
- Concepts in Practice: E-mail Forensic Tools
- Chapter Review
- Questions
- Answers
- References
- Chapter 12 The Whole Truth, and Nothing But the Truth
- Can I Get a Witness?
- Technical vs. Expert Witnesses
- Pre-trial Report Preparation
- I Just Want to Testify
- Writing a Good Report
- What Makes an Effective Report?
- Documenting the Case
- Theory into Practice: Generating a Report
- Do's and Don'ts for a DFI
- Resting the Case
- Chapter Review
- Questions
- Answers
- References
- Appendix A Acronyms
- Appendix B About the Download
- System Requirements
- Installing and Running Total Tester
- About Total Tester
- Technical Support
- Glossary
- Index
System requirements
File format: ePUB
Copy protection: Adobe-DRM (Digital Rights Management)
System requirements:
- Computer (Windows; MacOS X; Linux): Install the free reader Adobe Digital Editions prior to download (see eBook Help).
- Tablet/smartphone (Android; iOS): Install the free app Adobe Digital Editions or the app PocketBook before downloading (see eBook Help).
- E-reader: Bookeen, Kobo, Pocketbook, Sony, Tolino and many more (not Kindle).
The file format ePub works well for novels and non-fiction books – i.e., „flowing” text without complex layout. On an e-reader or smartphone, line and page breaks automatically adjust to fit the small displays.
This eBook uses Adobe-DRM, a „hard” copy protection. If the necessary requirements are not met, unfortunately you will not be able to open the eBook. You will therefore need to prepare your reading hardware before downloading.
Please note: We strongly recommend that you authorise using your personal Adobe ID after installation of any reading software.
For more information, see our ebook Help page.
File format: PDF
Copy-Protection: Adobe-DRM (Digital Rights Management)
System requirements:
- Computer (Windows; MacOS X; Linux): Install the free reader Adobe Digital Editions prior to download (see eBook Help).
- Tablet/smartphone (Android; iOS): Install the free app Adobe Digital Editions or the app PocketBook before downloading (see eBook Help).
- E-reader: Bookeen, Kobo, Pocketbook, Sony, Tolino and many more (only limited: Kindle).
The file format PDF always displays a book page identically on any hardware. This makes PDF suitable for complex layouts such as those used in textbooks and reference books (images, tables, columns, footnotes). Unfortunately, on the small screens of e-readers or smartphones, PDFs are rather annoying, requiring too much scrolling.
This eBook uses Adobe-DRM, a „hard” copy protection. If the necessary requirements are not met, unfortunately you will not be able to open the eBook. You will therefore need to prepare your reading hardware before downloading.
Please note: We strongly recommend that you authorise using your personal Adobe ID after installation of any reading software.
For more information, see our eBook Help page.