A01=Bruce Nikkel
Age Group_Uncategorized
Age Group_Uncategorized
Author_Bruce Nikkel
automatic-update
bash
business
c programming
Category1=Non-Fiction
Category=ULJL
Category=ULL
Category=UNH
Category=UR
computer
computer architecture
computer books
computer security
computers
COP=United States
crypto
cryptography
cyber
cyber security
cyber security books
cybersecurity
dark web
data
Delivery_Pre-order
education
engineering
eq_bestseller
eq_computing
eq_isMigrated=2
eq_nobargain
eq_non-fiction
forensics
hackers
hacking
hacking books
how to
internet
Language_English
linux
linux administration
linux command line
linux for beginners
linux kernel
network security
networking
open source
operating systems
PA=Reprinting
penetration test
penetration testing
Price_€50 to €100
privacy
programming
PS=Active
reference
security
softlaunch
tech
technology
Product details
- ISBN 9781593277932
- Dimensions: 178 x 234mm
- Publication Date: 01 Sep 2016
- Publisher: No Starch Press,US
- Publication City/Country: US
- Product Form: Paperback
- Language: English
Secure
checkout
Fast Shipping
Easy returns
Forensic image acquisition is an important part of postmortem incident response and evidence collection. Digital forensic investigators acquire, preserve, and manage digital evidence to support civil and criminal cases; examine organizational policy violations; resolve disputes; and analyze cyber attacks. Practical Forensic Imaging takes a detailed look at how to secure and manage digital evidence using Linux-based command line tools. This essential guide walks you through the entire forensic acquisition process and covers a wide range of practical scenarios and situations related to the imaging of storage media. You ll learn how to: Perform forensic imaging of magnetic hard disks, SSDs and flash drives, optical discs, magnetic tapes, and legacy technologies Protect attached evidence media from accidental modification Manage large forensic image files, storage capacity, image format conversion, compression, splitting, duplication, secure transfer and storage, and secure disposal Preserve and verify evidence integrity with cryptographic and piecewise hashing, public key signatures, and RFC-3161 timestamping Work with newer drive and interface technologies like NVME, SATA Express, 4K-native sector drives, SSHDs, SAS, UASP/USB3x, and Thunderbolt Manage drive security such as ATA passwords; encrypted thumb drives; Opal self-encrypting drives; OS-encrypted drives using BitLocker, FileVault, and TrueCrypt; and others Acquire usable images from more complex or challenging situations such as RAID systems, virtual machine images, and damaged media With its unique focus on digital forensic acquisition and evidence preservation, Practical Forensic Imaging is a valuable resource for experienced digital forensic investigators wanting to advance their Linux skills and experienced Linux administrators wanting to learn digital forensics. This is a must-have reference for every digital forensics lab.
Bruce Nikkel is the director of Cyber-Crime / IT Investigation & Forensics at a global financial institution. Nikkel has headed the bank's global IT forensics unit since 2005, and worked for the bank's IT Security and Risk departments since 1997. Nikkel has published a number of research papers in the digital forensics field, is an editor for Digital Investigation journal, and holds a PhD in network forensics.
