Digital Forensics Explained

Cover......Page 1
Half Title......Page 2
Title Page......Page 4
Copyright Page......Page 5
Table of Contents......Page 6
Preface......Page 12
Acknowledgments......Page 16
Author......Page 18
Contributors......Page 20
Forensic science......Page 22
What does it take to be a digital forensic investigator?......Page 24
Educational opportunities......Page 26
What opportunities are there for digital forensic investigators?......Page 27
What are the trends and challenges in digital forensics?......Page 28
Resources available to digital forensic investigators......Page 32
References......Page 34
Introduction......Page 36
First response......Page 38
Responding to a case......Page 45
Conclusion......Page 57
Other useful resources......Page 58
Computer forensics......Page 60
Write blockers......Page 64
Imaging......Page 65
Add-ons and other technologies......Page 67
Tools......Page 70
Mobile forensics tools......Page 71
Damaged media......Page 74
References......Page 75
E-mail......Page 76
Chat and messaging logs......Page 77
Search engine activity......Page 78
Internet history......Page 79
Social networking and gaming......Page 80
Malware and viruses......Page 81
Summary......Page 84
Mobile phone technology......Page 86
How a call is made......Page 87
Forensic challenges......Page 88
Forensic process......Page 89
Digital cell phone investigation......Page 93
Cameras......Page 98
Information sources and location information......Page 99
Cellular communications technology overview......Page 100
References......Page 102
Introduction......Page 104
Infrastructure as a service......Page 106
Software as a service......Page 107
Customer versus cloud provider responsibilities......Page 108
Other service models......Page 110
Multi-tenancy......Page 112
User access and provisioning......Page 113
Data protection and breaches......Page 115
Service access vulnerabilities......Page 118
Migration planning......Page 119
Incident response......Page 121
Security benefits of cloud......Page 122
The initiation of an investigation......Page 124
Information......Page 125
Evidence gathering......Page 126
Interviews and the analysis of evidence......Page 127
Analysis of the electronic evidence......Page 129
Prosecution and testimony......Page 131
Things to consider......Page 132
Conclusion......Page 134
Report content and considerations......Page 136
Sample reports......Page 139
Presenting and testifying......Page 149
Dr. Otting’s thoughts on criminal case testimony......Page 151
Summary......Page 152
Introduction......Page 154
Social networking......Page 155
Multimedia sharing......Page 156
Instant messaging and communication......Page 157
Search......Page 159
Social media forensics......Page 160
Street gangs......Page 161
Terrorist activity......Page 163
White collar crimes......Page 165
Summary......Page 166
References......Page 170
Introduction......Page 172
Online social engineering attacks......Page 173
Telephone social engineering attacks......Page 174
Mobile device social engineering attacks......Page 175
Personal social engineering attacks......Page 176
Reverse social engineering attacks......Page 178
Social engineering forensics......Page 181
Summary......Page 184
References......Page 185
Anti-forensic definition and concepts......Page 188
Anti-forensic methods......Page 189
Eliminate trails......Page 190
Hide evidence......Page 193
Destroy evidence......Page 199
Mobile anti-forensics......Page 200
References......Page 202
Link and visual analysis......Page 204
Conclusion......Page 212
Psychological implications of digital forensics......Page 214
Prospective from the career in law enforcement of Dr. Otting......Page 220
Ethical implications of digital forensics......Page 221
Cultural implications of digital forensics......Page 223
Conclusion......Page 224
References......Page 225
Case summary......Page 226
Evidence gathering......Page 227
Analysis of evidence......Page 229
Summary......Page 238
The case – taking a look......Page 240
Case #1 – things are not what they seem......Page 241
Working a criminal case......Page 242
Case #3 – conducting a thorough investigation......Page 243
Case #4 – conducting a thorough investigation......Page 245
Working a civil case......Page 247
Things to keep in mind during any investigation......Page 248
Summary......Page 249
Index......Page 250