What's happening in DFIR?

Start Date: November 28, 2021
Event Type: Course
Delivery Method: Online
Start Date: November 28, 2021
Event Type: Course
Delivery Method: Online
Start Date: November 29, 2021
Event Type: Course
Countries: USA
States (USA): California
Delivery Method: Physical location
Start Date: November 29, 2021
Event Type: Course
Delivery Method: Online
Start Date: November 30, 2021
Event Type: Course
Delivery Method: Online
belkasoft-trng
Start Date: December 06, 2021
Event Type: Course
Delivery Method: Online
As a proven industry leader, Belkasoft has remained at...
cyber-triage-logo-color-1
Start Date: December 06, 2021
Event Type: Webinar
Delivery Method: Online
We are hosting a live webinar...
Start Date: December 06, 2021
Event Type: Course
Delivery Method: Online
Start Date: December 06, 2021
Event Type: Course
Delivery Method: Online
Start Date: December 06, 2021
Event Type: Course
Countries: USA
States (USA): Texas
Delivery Method:
  • Online
  • Physical location

DFIR Training Blog

BS
Brett Shavers
Hot
In short, everything happened at once or in short succession...the DFIR Training site was attacked, practically everything wiped out. The latest ba...
Published Date
November 05, 2021
BS
Brett Shavers
A few years ago, I wrote a blog post on regulation in the Digital Forensics/Incident Response field titled “The last thing we want in DF/IR is the ...
Published Date
June 03, 2021
BS
Brett Shavers
Everything in this post applies to any career field, but I am targeting the DFIR field.  But first, right out of the gate, I am going to blame fa...
Published Date
April 21, 2021
BS
Brett Shavers
This is where the saved minutes take your competence to a much higher level, faster. This is why some consultants can charge $500 an hour or more (...
Published Date
April 13, 2021
BS
Brett Shavers
It’s been 5 years this month since DFIR.training started! From a little RSS feed reader to a full-fledged DFIR resource with lots more to come....
Published Date
March 31, 2021
BS
Brett Shavers
One of those common questions asked by attorneys to the DFIR professional is “Why do you charge so much? All you are doing is pushing buttons.” Th...
Published Date
March 26, 2021
BS
Brett Shavers
Usually, in the “electronic discovery” world, evidence collection consists of simply copying files by a file type and/or from a custodian account...
Published Date
March 02, 2021
BS
Brett Shavers
DFIR Review – Year in Review Jessica Hyde > Hi!  We at DFIR Review wanted to take a moment to share some of the great things all the volunteers ...
Published Date
February 04, 2021
BS
Brett Shavers
What a year 2020 has been! I am not referring to pandemics, toilet paper shortages, earthquakes, UFOs, politics, or even Tiger King. I am talking a...
Published Date
December 30, 2020
BS
Brett Shavers
Only 10 ways? Probably a lot more. But these are the top 10 that I have seen (some that I have experienced!) that can make a DFIR case go in a dire...
Published Date
July 31, 2019

Learn Computer Forensics: A beginner's guide to searching, analyzing, and securing digital evidence 1st Edition

519HbPUtKzL._SX403_BO1,204,203,200_

Key Features

  • Learn the core techniques of computer forensics to acquire and secure digital evidence skillfully
  • Conduct a digital forensic examination and document the digital evidence collected
  • Analyze security systems and overcome complex challenges with a variety of forensic investigations

Book Description

A computer forensics investigator must possess a variety of skills, including the ability to answer legal questions, gather and document evidence, and prepare for an investigation. This book will help you get up and running with using digital forensic tools and techniques to investigate cybercrimes successfully.

Starting with an overview of forensics and all the open source and commercial tools needed to get the job done, you'll learn core forensic practices for searching databases and analyzing data over networks, personal devices, and web applications. You'll then learn how to acquire valuable information from different places, such as filesystems, e-mails, browser histories, and search queries, and capture data remotely. As you advance, this book will guide you through implementing forensic techniques on multiple platforms, such as Windows, Linux, and macOS, to demonstrate how to recover valuable information as evidence. Finally, you'll get to grips with presenting your findings efficiently in judicial or administrative proceedings.

By the end of this book, you'll have developed a clear understanding of how to acquire, analyze, and present digital evidence like a proficient computer forensics investigator.

What you will learn

  • Understand investigative processes, the rules of evidence, and ethical guidelines
  • Recognize and document different types of computer hardware
  • Understand the boot process covering BIOS, UEFI, and the boot sequence
  • Validate forensic hardware and software
  • Discover the locations of common Windows artifacts
  • Document your findings using technically correct terminology

Who this book is for

If you're an IT beginner, student, or an investigator in the public or private sector this book is for you.This book will also help professionals and investigators who are new to incident response and digital forensics and interested in making a career in the cybersecurity domain.

Table of Contents

  1. Types of Computer-Based Investigations
  2. The Forensic Analysis Process
  3. Acquisition of Evidence
  4. Computer Systems
  5. Computer Investigation Process
  6. Windows Artifact Analysis
  7. RAM Memory Forensic Analysis
  8. Email Forensics – Investigation Techniques
  9. Internet Artifacts
  10. Report Writing
  11. Expert Witness Ethics

About the Author

William Oettinger is a veteran technical trainer and investigator. He is a retired police officer with the Las Vegas Metropolitan Police Department and a retired CID agent with the United States Marine Corps. He is a professional with over 20 years' experience in academic, local, military, federal, and international law enforcement organizations, where he acquired his multifaceted experience in IT, digital forensics, security operations, law enforcement, criminal investigations, policy, and procedure development. He has earned an MSc from Tiffin University, Ohio. He works for Bilecki and Tipon LLLC and the University of Maryland Global Campus (UMGC). When not working, he likes to spend time with his wife and his two miniature schnauzers.

--This text refers to the paperback edition.

Product details

  • ASIN ‏ : ‎ B086WBP289
  • Publisher ‏ : ‎ Packt Publishing; 1st edition (April 30, 2020)
  • Publication date ‏ : ‎ April 30, 2020
  • Language ‏ : ‎ English
  • File size ‏ : ‎ 31518 KB
  • Text-to-Speech ‏ : ‎ Enabled
  • Screen Reader ‏ : ‎ Supported
  • Enhanced typesetting ‏ : ‎ Enabled
  • X-Ray ‏ : ‎ Not Enabled
  • Word Wise ‏ : ‎ Not Enabled
  • Print length ‏ : ‎ 370 pages
  • Page numbers source ISBN ‏ : ‎ 1838648178
  • Lending ‏ : ‎ Not Enabled