Es wird kein Kindle Gerät benötigt. Laden Sie eine der kostenlosen Kindle Apps herunter und beginnen Sie, Kindle-Bücher auf Ihrem Smartphone, Tablet und Computer zu lesen.

  • Apple
  • Android
  • Windows Phone
  • Android

Geben Sie Ihre Mobiltelefonnummer ein, um die kostenfreie App zu beziehen.

Kindle-Preis: EUR 39,14
inkl. MwSt.

Diese Aktionen werden auf diesen Artikel angewendet:

Einige Angebote können miteinander kombiniert werden, andere nicht. Für mehr Details lesen Sie bitte die Nutzungsbedingungen der jeweiligen Promotion.

An Ihren Kindle oder ein anderes Gerät senden

An Ihren Kindle oder ein anderes Gerät senden

Facebook Twitter Pinterest <Einbetten>
File System Forensic Analysis von [Carrier, Brian]
Anzeige für Kindle-App

File System Forensic Analysis 1 , Kindle Edition

5.0 von 5 Sternen 1 Kundenrezension

Alle 3 Formate und Ausgaben anzeigen Andere Formate und Ausgaben ausblenden
Preis
Neu ab Gebraucht ab
Kindle Edition
"Bitte wiederholen"
EUR 39,14

Unsere Schatzkiste
Entdecken Sie monatlich Top-eBooks für je 1,99 EUR. Exklusive und beliebte eBooks aus verschiedenen Genres stark reduziert.

Produktbeschreibungen

Kurzbeschreibung

The Definitive Guide to File System Analysis: Key Concepts and Hands-on Techniques

 

Most digital evidence is stored within the computer's file system, but understanding how file systems work is one of the most technically challenging concepts for a digital investigator because there exists little documentation. Now, security expert Brian Carrier has written the definitive reference for everyone who wants to understand and be able to testify about how file system analysis is performed.

 

Carrier begins with an overview of investigation and computer foundations and then gives an authoritative, comprehensive, and illustrated overview of contemporary volume and file systems: Crucial information for discovering hidden evidence, recovering deleted data, and validating your tools. Along the way, he describes data structures, analyzes example disk images, provides advanced investigation scenarios, and uses today's most valuable open source file system analysis tools—including tools he personally developed. Coverage includes

  • Preserving the digital crime scene and duplicating hard disks for "dead analysis"
  • Identifying hidden data on a disk's Host Protected Area (HPA)
  • Reading source data: Direct versus BIOS access, dead versus live acquisition, error handling, and more
  • Analyzing DOS, Apple, and GPT partitions; BSD disk labels; and Sun Volume Table of Contents using key concepts, data structures, and specific techniques
  • Analyzing the contents of multiple disk volumes, such as RAID and disk spanning
  • Analyzing FAT, NTFS, Ext2, Ext3, UFS1, and UFS2 file systems using key concepts, data structures, and specific techniques
  • Finding evidence: File metadata, recovery of deleted files, data hiding locations, and more
  • Using The Sleuth Kit (TSK), Autopsy Forensic Browser, and related open source tools

When it comes to file system analysis, no other book offers this much detail or expertise. Whether you're a digital forensics specialist, incident response team member, law enforcement officer, corporate security specialist, or auditor, this book will become an indispensable resource for forensic investigations, no matter what analysis tools you use.

Synopsis

This is an advanced cookbook and reference guide for digital forensic practitioners. File System Forensic Analysis focuses on the file system and disk. The file system of a computer is where most files are stored and where most evidence is found; it also the most technically challenging part of forensic analysis. This book offers an overview and detailed knowledge of the file system and disc layout. The overview will allow an investigator to more easily find evidence, recover deleted data, and validate his tools. The cookbook section will show how to use the many open source tools for analysis, many of which Brian Carrier has developed himself.

Produktinformation

  • Format: Kindle Edition
  • Dateigröße: 17839 KB
  • Seitenzahl der Print-Ausgabe: 600 Seiten
  • Gleichzeitige Verwendung von Geräten: Bis zu 5 Geräte gleichzeitig, je nach vom Verlag festgelegter Grenze
  • Verlag: Addison-Wesley Professional; Auflage: 1 (17. März 2005)
  • Verkauf durch: Amazon Media EU S.à r.l.
  • Sprache: Englisch
  • ASIN: B000OZ0N9O
  • Text-to-Speech (Vorlesemodus): Aktiviert
  • X-Ray:
  • Word Wise: Nicht aktiviert
  • Screenreader: Unterstützt
  • Verbesserter Schriftsatz: Aktiviert
  • Durchschnittliche Kundenbewertung: 5.0 von 5 Sternen 1 Kundenrezension
  • Amazon Bestseller-Rang: #593.307 Bezahlt in Kindle-Shop (Siehe Top 100 Bezahlt in Kindle-Shop)

  •  Ist der Verkauf dieses Produkts für Sie nicht akzeptabel?

Kundenrezensionen

5.0 von 5 Sternen
5 Sterne
1
4 Sterne
0
3 Sterne
0
2 Sterne
0
1 Stern
0
Siehe die Kundenrezension
Sagen Sie Ihre Meinung zu diesem Artikel

Top-Kundenrezensionen

Format: Taschenbuch Verifizierter Kauf
Dies Buch kann ich nur empfehlen, sofern mann sich mit Datenrettung beschäftigen möchte. Es werden die verschiedenen Filsystem ausführlich beschrieben. Ich würde mir das Buch jederzeit wieder kaufen.
Kommentar Eine Person fand diese Informationen hilfreich. War diese Rezension für Sie hilfreich? Ja Nein Feedback senden...
Vielen Dank für Ihr Feedback.
Wir konnten Ihre Stimmabgabe leider nicht speichern. Bitte erneut versuchen
Missbrauch melden

Die hilfreichsten Kundenrezensionen auf Amazon.com (beta) (Kann Kundenrezensionen aus dem "Early Reviewer Rewards"-Programm beinhalten)

Amazon.com: 4.6 von 5 Sternen 62 Rezensionen
1 von 1 Kunden fanden die folgende Rezension hilfreich
5.0 von 5 Sternen Essential 17. Januar 2016
Von Aaron - Veröffentlicht auf Amazon.com
Format: Taschenbuch Verifizierter Kauf
I've not completed reading this book yet but let me tell you this is absolutely the book that needed to be written on this subject. I've taken lots of courses in forensics and this re-established the knowledge from those courses. I can confirm the validity of the information provided from the courses I've taken and it's served as a good mix of new material and refresher material. Granted, I have a few hundred pages to go but the way this is going I can't recommend it enough. This is basically The Bible of file systems. It's a book you should read once simply to have the exposure to the knowledge he provides. No regrets with this purchase. Wholeheartedly recommending this to anyone who wants to go above and beyond in this field.
1 von 1 Kunden fanden die folgende Rezension hilfreich
3.0 von 5 Sternen Not an easy read but good resource 28. Mai 2016
Von M. Bradley - Veröffentlicht auf Amazon.com
Format: Taschenbuch Verifizierter Kauf
My understanding is that this book is going to be updated and if so, would be welcome. I read a ton of reviews that praised this book and while I'm sure they are correct, it's not light reading. I also felt that some topics weren't covered too well for someone that isn't a novice but isn't an expert either. It's written very matter-of-factly, so I felt like if you are strong at this topic or have a good solid foundation, you'll be good. If you are a newer person or looking to have a clearer understanding, I feel that this let me down a bit.
1 von 1 Kunden fanden die folgende Rezension hilfreich
5.0 von 5 Sternen It's a little out dated (2006) but all the basics ... 24. April 2017
Von Buck - Veröffentlicht auf Amazon.com
Format: Taschenbuch Verifizierter Kauf
It's a little out dated (2006) but all the basics are there. Microsoft has rewritten some of the rules recently and you have to read up on those but this will give you a start. That is why I bought it!
5 von 5 Kunden fanden die folgende Rezension hilfreich
5.0 von 5 Sternen This is what I keep at my right hand during any forensic analysis. 3. Februar 2013
Von Nicholas Redman Marshall - Veröffentlicht auf Amazon.com
Format: Taschenbuch Verifizierter Kauf
This book is the beginning and ending point for anyone who needs to know how to forensically examine a computers hard drive. Understanding the file system layouts and forensic procedures described in this book is necessary to truly testify as an expert, otherwise you are just trusting that what ever tool you use is going to work. Carrier does a very good job of laying out all of the steps necessary to create a forensically sound disk image as well as going into all of the details of how the most commonly used file systems are structured and how to examine them at the lowest levels using a simple hex editor. While this book alone will not make you a forensic expert, it provides all of the information necessary to perform a forensic examination of the most common file systems and the procedure it lays out on how to perform the examination can be used on any file system.
2 von 2 Kunden fanden die folgende Rezension hilfreich
5.0 von 5 Sternen A must-have for digital forensics. 14. Juli 2014
Von Danny McCaslin Jr. - Veröffentlicht auf Amazon.com
Format: Taschenbuch Verifizierter Kauf
This isn't beach reading by any stretch of the imagination. I used the book as a read-along for some online seminars I was doing in digital forensics, and it helped me to understand the concepts better. Brian Carrier is also the author of the Sleuth Kit forensics package. It's a must have if you're doing any kind of digital forensics or data recovery work.
Waren diese Rezensionen hilfreich? Wir wollen von Ihnen hören.
click to open popover

Wo ist meine Bestellung?

Versand & Rücknahme

Brauchen Sie Hilfe?