411 REFERENCE · Wikibooks
Introduction to Digital Forensics
Reference material by Wikibooks contributors. This retains its source identity and is not 411 news reporting.
center|200px|link=
Introduction to Digital Forensics
A "short and sweet" introduction to the topic of Digital Forensics
This book is a "short and sweet" introduction to the topic of Digital Forensics, covering theoretical, practical and legal aspects. The first part of the book focuses on the history of digital forensics as a discipline and discusses the traits and requirements needed to become an forensic analyst. The middle portion of the book constitutes a general guide to a digital forensic investigation, mostly focusing on computers. It finishes with a discussion of the legal aspects of digital forensics as well as some other observations for managers or other interested parties.
Contents
notice This book requires a reasonable understanding of computers and their workings
Digital forensics
/Introduction/ 100%
Overview of the topic and introduction to the book
/So you want to be a forensic analyst/? 100%
Who can benefit from this material?
/Requirements/ 100%
Hardware and software requirements
Digital forensics
/A history/ 50%
A brief history of the discipline
Types of investigations 100%
Investigations can take many forms
/The forensic process/ 50%
Description of the traditional digital forensic process
/Terminology/ 50%
Before we begin, explanation of some words
Acquiring Evidence
thumb|right|Tableau forensic write blocker used for acquisitions
/Documenting evidence/ 50%
How to document exhibits and media
/Acquisition/ 75%
Notes on the authentication of evidence
Example task 50%
Have a go at recording and acquiring some data
Analysis
/Forensic tools/ 75%
Common forensic tools and their uses
/First steps in analysis/ 25%
Where to begin? Often a daunting question
/Chat, email and internet artefacts/ 25%
One of the main areas of investigation will be the internet cache
/Image investigations/ 25%
Images can contain a wealth of information
/Linux & Mac/ 0%
Some significant differences & problems exist when examining different operating systems
Example task 25%
Perform a simple analysis
Reporting findings
/Reporting/ 50%
Reporting is one of the key aspects of digital forensics
/Giving expert evidence/ 0%
How to defend your findings in court
Example task 0%
Try your hand at putting together a simple report
Mobile devices
thumb|right|iPhone in an RF bag
/Mobile devices/ 0%
An introduction to mobile device forensics
/Mobile forensics tools/ 0%
Hardware/software for mobile analysis
/Mobile device analysis/ 0%
Specific notes for analysing mobile devices
Legal considerations
/Criminal investigations/ 0%
Considerations when investigating crime
/Civil investigations (eDiscovery)/ 0%
The various rules relating to civil investigation
/Seizing digital media/ 10%
Important considerations apply to how and when you can seize media
Advice
/Managing an investigation/ 0%
Advice for managers handling a digital investigation
/Anti-forensics/
Counter measures to impair forensics analysis
Appendices
/Glossary/
/Authors/
/Bibliography/
/Further reading/
Information security
25%
I
__NOTOC__ __NOEDITSECTION__