Real Digital Forensics: Computer Security and Incident Response

4.15 avg rating
( 71 ratings by Goodreads )
)  
9780321240699: Real Digital Forensics: Computer Security and Incident Response
View all copies of this ISBN edition:
 
 

You can't succeed in the field of computer forensics without hands-on practice--and you can't get hands-on practice without real forensic data. The solution: Real Digital Forensics. In this book, a team of world-class computer forensics experts walks you through six detailed, highly realistic investigations and provides a DVD with all the data you need to follow along and practice. From binary memory dumps to log files, this DVD's intrusion data was generated by attacking live systems using the same tools and methods real-world attackers use. The evidence was then captured and analyzed using the same tools the authors employ in their own investigations. This book relies heavily on open source tools, so you can perform virtually every task without investing in any commercial software. You'll investigate environments ranging from financial institutions to software companies and crimes ranging from intellectual property theft to SEC violations. As you move step by step through each investigation, you'll discover practical techniques for overcoming the challenges forensics professionals face most often.Inside, you will find in-depth information on the following areas: * Responding to live incidents in both Windows and Unix environments * Determining whether an attack has actually occurred * Assembling a toolkit you can take to the scene of a computer-related crime * Analyzing volatile data, nonvolatile data, and files of unknown origin * Safely performing and documenting forensic duplications * Collecting and analyzing network-based evidence in Windows and Unix environments * Reconstructing Web browsing, e-mail activity, and Windows Registry changes * Tracing domain name ownership and the source of e-mails * Duplicating and analyzing the contents of PDAs and flash memory devices The accompanying DVD contains several gigabytes of compressed data generated from actual intrusions. This data mirrors what analysts might find in real investigations and allows the reader to learn about forensic investigations in a realisticsetting. A(c) Copyright Pearson Education. All rights reserved.

"synopsis" may belong to another edition of this title.

About the Author:

Keith Jones (Alexandria, VA) heads the forensics practice at Red Cliff Consulting. Former military intelligence officer Richard Bejtlich (Manassas Park, VA) is a security engineer at ManTech International Corporation's Computer Forensics and Intrusion Analysis division. A recognized authority on computer security, he has extensive experience with network security monitoring, incident response, and forensics. Curtis Rose (Alexandria, VA) is vice president of Red Cliff and an industry-recognized expert in computer security with more than eighteen years experience in investigations, computer forensics, technical, and information security.

"About this title" may belong to another edition of this title.

Top Search Results from the AbeBooks Marketplace

1.

Keith J. Jones
ISBN 10: 0321240693 ISBN 13: 9780321240699
New Quantity Available: 1
Seller:
GoldBooks
(Denver, CO, U.S.A.)

Book Description Condition: new. Seller Inventory # think0321240693

More information about this seller | Contact this seller

Buy New
31.98
Convert currency

Add to Basket

Shipping: FREE
Within U.S.A.
Destination, rates & speeds

2.

Jones, Keith J.", "Bejtlich, Richard", "Rose, Curtis W."
Published by Addison-Wesley Professional (2005)
ISBN 10: 0321240693 ISBN 13: 9780321240699
New Paperback Quantity Available: 15
Seller:
booksXpress
(Freehold, NJ, U.S.A.)

Book Description Addison-Wesley Professional, 2005. Paperback. Condition: new. Seller Inventory # 9780321240699

More information about this seller | Contact this seller

Buy New
42.72
Convert currency

Add to Basket

Shipping: FREE
Within U.S.A.
Destination, rates & speeds

3.

Jones, Keith J.; Rose, Curtis W.; Bejtlich, Richard; Rose, Curtis
ISBN 10: 0321240693 ISBN 13: 9780321240699
New Quantity Available: 5
Seller:
GreatBookPricesUK
(Castle Donington, DERBY, United Kingdom)

Book Description Condition: New. Seller Inventory # 3445452-n

More information about this seller | Contact this seller

Buy New
45.21
Convert currency

Add to Basket

Shipping: 15
From United Kingdom to U.S.A.
Destination, rates & speeds

4.

Keith J. Jones, Richard Bejtlich, Curtis W. Rose
Published by Pearson Education (US), United States (2005)
ISBN 10: 0321240693 ISBN 13: 9780321240699
New Hardcover Quantity Available: 10
Seller:
Book Depository hard to find
(London, United Kingdom)

Book Description Pearson Education (US), United States, 2005. Mixed media product. Condition: New. Language: English. Brand new Book. You can't succeed in the field of computer forensics without hands-on practice--and you can't get hands-on practice without real forensic data. The solution: Real Digital Forensics. In this book, a team of world-class computer forensics experts walks you through six detailed, highly realistic investigations and provides a DVD with all the data you need to follow along and practice. From binary memory dumps to log files, this DVD's intrusion data was generated by attacking live systems using the same tools and methods real-world attackers use. The evidence was then captured and analyzed using the same tools the authors employ in their own investigations. This book relies heavily on open source tools, so you can perform virtually every task without investing in any commercial software. You'll investigate environments ranging from financial institutions to software companies and crimes ranging from intellectual property theft to SEC violations. As you move step by step through each investigation, you'll discover practical techniques for overcoming the challenges forensics professionals face most often.Inside, you will find in-depth information on the following areas: * Responding to live incidents in both Windows and Unix environments * Determining whether an attack has actually occurred * Assembling a toolkit you can take to the scene of a computer-related crime * Analyzing volatile data, nonvolatile data, and files of unknown origin * Safely performing and documenting forensic duplications * Collecting and analyzing network-based evidence in Windows and Unix environments * Reconstructing Web browsing, e-mail activity, and Windows Registry changes * Tracing domain name ownership and the source of e-mails * Duplicating and analyzing the contents of PDAs and flash memory devices The accompanying DVD contains several gigabytes of compressed data generated from actual intrusions.This data mirrors what analysts might find in real investigations and allows the reader to learn about forensic investigations in a realisticsetting. A(c) Copyright Pearson Education. All rights reserved. Seller Inventory # BZV9780321240699

More information about this seller | Contact this seller

Buy New
61.33
Convert currency

Add to Basket

Shipping: FREE
From United Kingdom to U.S.A.
Destination, rates & speeds

5.

Jones, Keith J.; Bejtlich, Richard; Rose, Curtis W.
ISBN 10: 0321240693 ISBN 13: 9780321240699
New Quantity Available: 1
Seller:
BennettBooksLtd
(San Diego, CA, U.S.A.)

Book Description Condition: New. New. Seller Inventory # M-0321240693

More information about this seller | Contact this seller

Buy New
68.36
Convert currency

Add to Basket

Shipping: 3.92
Within U.S.A.
Destination, rates & speeds

6.

Keith J. Jones, Richard Bejtlich, Curtis W. Rose
Published by Addison-Wesley Professional (2005)
ISBN 10: 0321240693 ISBN 13: 9780321240699
New Paperback Quantity Available: 1
Seller:
Ergodebooks
(RICHMOND, TX, U.S.A.)

Book Description Addison-Wesley Professional, 2005. Paperback. Condition: New. Seller Inventory # DADAX0321240693

More information about this seller | Contact this seller

Buy New
78.65
Convert currency

Add to Basket

Shipping: 1.58
Within U.S.A.
Destination, rates & speeds

7.

Jones, Keith J.; Bejtlich, Richard; Rose, Curtis W.
Published by Addison-Wesley Professional (2005)
ISBN 10: 0321240693 ISBN 13: 9780321240699
New Softcover Quantity Available: 1
Seller:
Irish Booksellers
(Portland, ME, U.S.A.)

Book Description Addison-Wesley Professional, 2005. Condition: New. book. Seller Inventory # M0321240693

More information about this seller | Contact this seller

Buy New
81.14
Convert currency

Add to Basket

Shipping: 11.88
Within U.S.A.
Destination, rates & speeds

8.

Jones, Keith J.; Bejtlich, Richard; Rose, Curtis W.
Published by Addison-Wesley Professional (2005)
ISBN 10: 0321240693 ISBN 13: 9780321240699
New Softcover Quantity Available: > 20
Seller:
Palexbooks
(Sanford, NC, U.S.A.)

Book Description Addison-Wesley Professional, 2005. Condition: New. Brand new! Please provide a physical shipping address. Seller Inventory # 9780321240699

More information about this seller | Contact this seller

Buy New
126.67
Convert currency

Add to Basket

Shipping: 2.38
Within U.S.A.
Destination, rates & speeds

9.

Keith J. Jones/ Richard Bejtlich/ Curtis W. Rose
Published by Addison-Wesley (2005)
ISBN 10: 0321240693 ISBN 13: 9780321240699
New Paperback Quantity Available: 1
Seller:
Revaluation Books
(Exeter, United Kingdom)

Book Description Addison-Wesley, 2005. Paperback. Condition: Brand New. paperback/cd-rom edition. 650 pages. 9.25x7.00x1.75 inches. In Stock. Seller Inventory # zk0321240693

More information about this seller | Contact this seller

Buy New
108.21
Convert currency

Add to Basket

Shipping: 35
From United Kingdom to U.S.A.
Destination, rates & speeds