EnCase^® Computer Forensics: The Official EnCE: EnCase^? Certified Examiner Study Guide

by Steve Bunting; William Wei

• ISBN13: 9780470008348
• ISBN10: 0470008342
• Format: eBook
• Copyright: 2006-04-01
• Publisher: Sybex

Summary

Guidance Software's EnCase product is the premier computer forensics tool on the market, used in law enforcement labs for digital evidence collection; in commercial settings for incident response and information assurance; and by the FBI and Department of Defense to detect domestic and international threats This guide prepares readers for both the CBT and practical phases of the exam that validates mastery of EnCase Written by two law enforcement professionals who are computer forensics specialists and EnCase trainers Includes the EnCase Legal Journal, essential for forensics investigators who need to be sure they are operating within the law and able to give expert testimony The CD includes tools to help readers prepare for Phase II of the certification, which requires candidates to examine computer evidence, as well as a searchable PDF of the text

Table of Contents

Foreword

About the Authors

Introduction

Assessment Test

Computer Hardware

File Systems

First Response

Acquiring Digital Evidence

EnCase Concepts

EnCase Environment

Understanding, Searching for, and Bookmarking Data

File Signature Analysis and Hash Analysis

Windows Operating System Artifacts

Advanced EnCase

Creating Paperless Reports

Glossary

Index

Table of Contents provided by Publisher. All Rights Reserved.