Advertisement

© 2020

Fundamentals of Digital Forensics

Theory, Methods, and Real-Life Applications

Textbook

Table of contents

  1. Front Matter
    Pages i-xiii
  2. Part I

    1. Front Matter
      Pages 1-1
    2. Joakim Kävrestad
      Pages 3-7
    3. Joakim Kävrestad
      Pages 9-16
    4. Joakim Kävrestad
      Pages 17-29
    5. Joakim Kävrestad
      Pages 31-45
    6. Joakim Kävrestad
      Pages 47-55
  3. Part II

    1. Front Matter
      Pages 57-57
    2. Joakim Kävrestad
      Pages 63-68
    3. Joakim Kävrestad
      Pages 69-78
    4. Joakim Kävrestad
      Pages 79-83
    5. Joakim Kävrestad
      Pages 85-98
  4. Part III

    1. Front Matter
      Pages 99-99
    2. Joakim Kävrestad
      Pages 101-113
    3. Joakim Kävrestad
      Pages 115-121
    4. Joakim Kävrestad
      Pages 123-133
    5. Joakim Kävrestad
      Pages 135-153
    6. Joakim Kävrestad
      Pages 155-167
    7. Joakim Kävrestad
      Pages 169-187

About this book

Introduction

This practical and accessible textbook/reference describes the theory and methodology of digital forensic examinations, presenting examples developed in collaboration with police authorities to ensure relevance to real-world practice. The coverage includes discussions on forensic artifacts and constraints, as well as forensic tools used for law enforcement and in the corporate sector. Emphasis is placed on reinforcing sound forensic thinking, and gaining experience in common tasks through hands-on exercises.

This enhanced second edition has been expanded with new material on incident response tasks and computer memory analysis.

Topics and features:

  • Outlines what computer forensics is, and what it can do, as well as what its limitations are
  • Discusses both the theoretical foundations and the fundamentals of forensic methodology
  • Reviews broad principles that are applicable worldwide
  • Explains how to find and interpret several important artifacts
  • Describes free and open source software tools, along with the AccessData Forensic Toolkit
  • Features exercises and review questions throughout, with solutions provided in the appendices
  • Includes numerous practical examples, and provides supporting video lectures online

This easy-to-follow primer is an essential resource for students of computer forensics, and will also serve as a valuable reference for practitioners seeking instruction on performing forensic examinations.

Joakim Kävrestad is a lecturer and researcher at the University of Skövde, Sweden, and an AccessData Certified Examiner. He also serves as a forensic consultant, with several years of experience as a forensic expert with the Swedish police.

Keywords

Forensics Computer Forensics Digital Forensics Imaging AccessData Criminal Investigation Computer Examination Password Cracking Live Forensics Computer Forensic Methods

Authors and affiliations

  1. 1.School of InformaticsUniversity of SkövdeSkövdeSweden

About the authors

Joakim Kävrestad is a lecturer and researcher at the University of Skövde, Sweden, and an AccessData Certified Examiner. He also serves as a forensic consultant, with several years of experience as a forensic expert with the Swedish police.

Bibliographic information

Industry Sectors
Pharma
Automotive
Chemical Manufacturing
Biotechnology
IT & Software
Telecommunications
Consumer Packaged Goods
Engineering
Finance, Business & Banking
Electronics
Energy, Utilities & Environment
Aerospace