Practical Linux Forensics: A Guide for Digital Investigators

Bruce Nikkel

400 pages, parution le 20/12/2021

Ajouter à une liste

Expédié sous 24h

Livraison à partir de 0,01€ dès 35€ d'achats
Pour une livraison en France métropolitaine

Retrait à la librairie - Paris 5e

Disponible dès le 11/11

QUANTITÉ

Résumé

Practical Linux Forensics dives into the technical details of analyzing postmortem forensic images of Linux systems which have been misused, abused, or the target of malicious attacks. It helps forensic investigators locate and analyze digital evidence found on Linux desktops, servers, and IoT devices. You'll learn how to identify digital artifacts which may be of interest to an investigation, draw logical conclusions, reconstruct past activity from incidents, how Linux works from a digital forensics and investigation perspective, and how to interpret evidence from Linux environments. Introduction
Chapter 1: Digital Forensics Overview
Chapter 2 : Linux Overview
Chapter 3: Extracting Evidence from Storage Devices and Filesystems
Chapter 4: Directory Layout and Forensic Analysis of Linux Files
Chapter 5: Investigating Evidence from Linux Logs
Chapter 6: Reconstructing System Boot and Initialization
Chapter 7: Examination of Installed Software Packages
Chapter 8: Identifying Network Configuration Artifacts
Chapter 9: Forensic Analysis of Time and Location
Chapter 10: Reconstructing User Desktops and Login Activity
Chapter 11: Forensic Traces of Attached Peripheral Devices
Afterword
Appendix A: File and Directory List for Digital Investigators Bruce Nikkel is a professor at the Bern University of Applied Sciences in Switzerland, specializing in digital forensics and cybercrime. He is co-head of the university's research institute for cybersecurity and engineering, and director of the Masters program in Digital Forensics and Cyber Investigation. In addition to his academic work, he has worked in risk and security departments at a global financial institution since 1997. He headed the bank's Cybercrime Intelligence & Forensic Investigation team for more than 15 years and currently works as an advisor. Bruce holds a PhD in network forensics, is the author of Practical Forensic Imaging (No Starch Press, 2016), and is an editor with Forensic Science International's Digital Investigation journal. He has been a Unix and Linux enthusiast since the 1990s.

Caractéristiques techniques

	PAPIER
Éditeur(s)	No Starch Press
Auteur(s)	Bruce Nikkel
Parution	20/12/2021
Nb. de pages	400
EAN13	9781718501966

Avantages Eyrolles.com

Livraison à partir de 0,01 € en France métropolitaine

Paiement en ligne SÉCURISÉ

Livraison dans le monde

Retour sous 15 jours

+ d'un million et demi de livres disponibles

Practical Linux Forensics: A Guide for Digital Investigators

Résumé

Caractéristiques techniques

Consultez aussi