04642nam a22005295i 4500001001800000003000900018005001700027007001500044008004100059020001800100024003500118050001500153072001500168072001600183072002300199072001400222072001500236100008200251245016500333250001800498264007500516300006600591336002600657337002600683338003600709347002400745490004200769505071400811520191801525650002103443650002303464650002103487650001703508650003503525650002203560650002103582650003203603700007703635700014403712710003403856773002603890776003603916776003603952776003603988830004204024856004604066978-3-031-53649-6DE-He21320251030111736.0cr nn 008mamaa240321s2024    sz |    s    |||| 0|eng d  a97830315364967 a10.1007/978-3-031-53649-62doi 4aQA76.9.A25 7aUR2bicssc 7aUTN2bicssc 7aCOM0530002bisacsh 7aUR2thema 7aUTN2thema1 aKävrestad, Joakim.eauthor.4aut4http://id.loc.gov/vocabulary/relators/aut10aFundamentals of Digital Forensicsh[electronic resource] :bA Guide to Theory, Research and Applications /cby Joakim Kävrestad, Marcus Birath, Nathan Clarke.  a3rd ed. 2024. 1aCham :bSpringer International Publishing :bImprint: Springer,c2024.  aXIV, 298 p. 126 illus., 58 illus. in color.bonline resource.  atextbtxt2rdacontent  acomputerbc2rdamedia  aonline resourcebcr2rdacarrier  atext filebPDF2rda1 aTexts in Computer Science,x1868-095X0 aPart I: Theory -- 1. What Is Digital Forensics? -- 2. Ethics and Integrity -- Computer Theory -- 3. Notable Artifacts -- 4. Decryption and Password Enforcing -- Part II: The Forensic Process -- 5. Cybercrime, Cyber-Aided Crime and Digital Evidence -- 6. Incident Response -- Collecting Evidence -- 7. Triage -- Analyzing Data and Writing Reports -- Part III: Get Practical -- 8. Collecting Data -- 9. Indexing and Searching -- Cracking -- 10. Finding Artifacts -- 11. Some Common Questions and Tasks -- 12. FTK Specifics -- 13. Open-Source or Freeware Tools -- Part IV: Memory Forensics -- 14. Memory Analysis -- Memory Analysis Tools -- 15. Memory Analysis in Criminal Investigations -- 16. Malware Analysis.  aThis practical and accessible textbook/reference describes the theory and methodology of digital forensic examinations, presenting examples developed in collaboration with police authorities to ensure relevance to real-world practice. The coverage includes discussions on forensic artifacts and constraints, as well as forensic tools used for law enforcement and in the corporate sector. Emphasis is placed on reinforcing sound forensic thinking, and gaining experience in common tasks through hands-on exercises. This enhanced third edition describes practical digital forensics with open-source tools and includes an outline of current challenges and research directions. Topics and features: Outlines what computer forensics is, and what it can do, as well as what its limitations are Discusses both the theoretical foundations and the fundamentals of forensic methodology Reviews broad principles that are applicable worldwide Explains how to find and interpret several important artifacts Describes free and open-source software tools Features content on corporate forensics, ethics, SQLite databases, triage, and memory analysis Includes new supporting video lectures on YouTube This easy-to-follow primer is an essential resource for students of computer forensics, and will also serve as a valuable reference for practitioners seeking instruction on performing forensic examinations. Joakim Kävrestad is a lecturer and researcher at Jönköping School of Engineering, Sweden, and an AccessData Certified Examiner. He also serves as a forensic consultant, with several years of experience as a forensic expert with the Swedish police. Marcus Birath is an adjunct senior lecturer in informatics at the University of Skövde. Nathan Clarke is a Professor of Cyber Security and Digital Forensics at the University of Plymouth. He is also an adjunct Professor at Edith Cowan University, Western Australia. 0aData protection. 0aForensic sciences. 0aComputer vision. 0aCriminology.14aData and Information Security.24aForensic Science.24aComputer Vision.24aCrime Control and Security.1 aBirath, Marcus.eauthor.4aut4http://id.loc.gov/vocabulary/relators/aut1 aClarke, Nathan.eauthor.0(orcid)0000-0002-3595-38001https://orcid.org/0000-0002-3595-38004aut4http://id.loc.gov/vocabulary/relators/aut2 aSpringerLink (Online service)0 tSpringer Nature eBook08iPrinted edition:z978303153648908iPrinted edition:z978303153650208iPrinted edition:z9783031539091 0aTexts in Computer Science,x1868-095X40uhttps://doi.org/10.1007/978-3-031-53649-6