THE DEFINITIVE GUIDE TO DIGITAL FORENSICS—NOW THOROUGHLY UPDATED WITH NEW TECHNIQUES, TOOLS, AND SOLUTIONS

Complete, practical coverage of both technical and investigative skills

Thoroughly covers modern devices, networks, and the Internet

Addresses online and lab investigations, documentation, admissibility, and more

Aligns closely with the NSA Knowledge Units and the NICE Cybersecurity Workforce Framework

As digital crime soars, so does the need for experts who can recover and evaluate evidence for successful prosecution. Now, Dr. Darren Hayes has thoroughly updated his definitive guide to digital forensics investigations, reflecting current best practices for securely seizing, extracting and analyzing digital evidence, protecting the integrity of the chain of custody, effectively documenting investigations, and scrupulously adhering to the law, so that your evidence is admissible in court.

Every chapter of this new Second Edition is revised to reflect newer technologies, the latest challenges, technical solutions, and recent court decisions. Hayes has added detailed coverage of wearable technologies, IoT forensics, 5G communications, vehicle forensics, and mobile app examinations; advances in incident response; and new iPhone and Android device examination techniques. Through practical activities, realistic examples, and fascinating case studies, you’ll build hands-on mastery—and prepare to succeed in one of today’s fastest-growing fields.

LEARN HOW TO

Understand what digital forensics examiners do, the evidence they work with, and the opportunities available to them
Explore how modern device features affect evidence gathering, and use diverse tools to investigate them
Establish a certified forensics lab and implement best practices for managing and processing evidence
Gather data online to investigate today’s complex crimes
Uncover indicators of compromise and master best practices for incident response
Investigate financial fraud with digital evidence
Use digital photographic evidence, including metadata and social media images
Investigate wearable technologies and other “Internet of Things” devices
Learn new ways to extract a full fi le system image from many iPhones
Capture extensive data and real-time intelligence from popular apps
Follow strict rules to make evidence admissible, even after recent Supreme Court decisions

Second Edition table of contents to follow; First Edition shown below.

Preface

Introduction

1. The Scope of Computer Forensics

2. File Systems

3. Computer Hardware

4. Data Acquisition

5. Online Investigations

6. Documenting the Investigation

7. Evidence Admissibility

8. Network Forensics

9. Mobile Forensics

10. Image Forensics

11. Mac Forensics

12. Case Studies

13. Child Endangerment (Law Enforcement Only)

What is included with this book?

The New copy of this book will include any supplemental materials advertised. Please check the title of the book to determine if it should include any access cards, study guides, lab manuals, CDs, etc.

The Used, Rental and eBook copies of this book are not guaranteed to include any supplemental materials. Typically, only the book itself is included. This is true even if the title states it includes any access cards, study guides, lab manuals, CDs, etc.