Digital Forensics Explained

Description

This book covers the full life cycle of conducting a mobile and computer digital forensic examination, including planning and performing an investigation as well as report writing and testifying. Case reviews in corporate, civil, and criminal situations are also described from both prosecution and defense perspectives. Digital Forensics Explained, Second Edition draws from years of experience in local, state, federal, and international environments and highlights the challenges inherent in deficient cyber security practices. Topics include the importance of following the scientific method and verification, legal and ethical issues, planning an investigation (including tools and techniques), incident response, case project management and authorization, social media and internet, cloud, anti-forensics, link and visual analysis, and psychological considerations. The book is a valuable resource for the academic environment, law enforcement, those in the legal profession, and those working in the cyber security field. Case reviews include cyber security breaches, anti-forensic challenges, child exploitation, and social media investigations. Cover......Page 1 Half Title......Page 2 Title Page......Page 4 Copyright Page......Page 5 Table of Contents......Page 6 Preface......Page 12 Acknowledgments......Page 16 Author......Page 18 Contributors......Page 20 Forensic science......Page 22 What does it take to be a digital forensic investigator?......Page 24 Educational opportunities......Page 26 What opportunities are there for digital forensic investigators?......Page 27 What are the trends and challenges in digital forensics?......Page 28 Resources available to digital forensic investigators......Page 32 References......Page 34 Introduction......Page 36 First response......Page 38 Responding to a case......Page 45 Conclusion......Page 57 Other useful resources......Page 58 Computer forensics......Page 60 Write blockers......Page 64 Imaging......Page 65 Add-ons and other technologies......Page 67 Tools......Page 70 Mobile forensics tools......Page 71 Damaged media......Page 74 References......Page 75 E-mail......Page 76 Chat and messaging logs......Page 77 Search engine activity......Page 78 Internet history......Page 79 Social networking and gaming......Page 80 Malware and viruses......Page 81 Summary......Page 84 Mobile phone technology......Page 86 How a call is made......Page 87 Forensic challenges......Page 88 Forensic process......Page 89 Digital cell phone investigation......Page 93 Cameras......Page 98 Information sources and location information......Page 99 Cellular communications technology overview......Page 100 References......Page 102 Introduction......Page 104 Infrastructure as a service......Page 106 Software as a service......Page 107 Customer versus cloud provider responsibilities......Page 108 Other service models......Page 110 Multi-tenancy......Page 112 User access and provisioning......Page 113 Data protection and breaches......Page 115 Service access vulnerabilities......Page 118 Migration planning......Page 119 Incident response......Page 121 Security benefits of cloud......Page 122 The initiation of an investigation......Page 124 Information......Page 125 Evidence gathering......Page 126 Interviews and the analysis of evidence......Page 127 Analysis of the electronic evidence......Page 129 Prosecution and testimony......Page 131 Things to consider......Page 132 Conclusion......Page 134 Report content and considerations......Page 136 Sample reports......Page 139 Presenting and testifying......Page 149 Dr. Otting’s thoughts on criminal case testimony......Page 151 Summary......Page 152 Introduction......Page 154 Social networking......Page 155 Multimedia sharing......Page 156 Instant messaging and communication......Page 157 Search......Page 159 Social media forensics......Page 160 Street gangs......Page 161 Terrorist activity......Page 163 White collar crimes......Page 165 Summary......Page 166 References......Page 170 Introduction......Page 172 Online social engineering attacks......Page 173 Telephone social engineering attacks......Page 174 Mobile device social engineering attacks......Page 175 Personal social engineering attacks......Page 176 Reverse social engineering attacks......Page 178 Social engineering forensics......Page 181 Summary......Page 184 References......Page 185 Anti-forensic definition and concepts......Page 188 Anti-forensic methods......Page 189 Eliminate trails......Page 190 Hide evidence......Page 193 Destroy evidence......Page 199 Mobile anti-forensics......Page 200 References......Page 202 Link and visual analysis......Page 204 Conclusion......Page 212 Psychological implications of digital forensics......Page 214 Prospective from the career in law enforcement of Dr. Otting......Page 220 Ethical implications of digital forensics......Page 221 Cultural implications of digital forensics......Page 223 Conclusion......Page 224 References......Page 225 Case summary......Page 226 Evidence gathering......Page 227 Analysis of evidence......Page 229 Summary......Page 238 The case – taking a look......Page 240 Case #1 – things are not what they seem......Page 241 Working a criminal case......Page 242 Case #3 – conducting a thorough investigation......Page 243 Case #4 – conducting a thorough investigation......Page 245 Working a civil case......Page 247 Things to keep in mind during any investigation......Page 248 Summary......Page 249 Index......Page 250