Hacking Exposed Computer Forensics, Second Edition : Computer Forensics Secrets & Solutions

'Provides the right mix of practical how-to knowledge in a straightforward, informative fashion that ties it all the complex pieces together with real-world case studies....Delivers the most valuable insight on the market. The authors cut to the chase of what people must understand to effectively perform computer forensic investigations.'--Brian H. Karney, COO, AccessData Corporation The latest strategies for investigating cyber-crime Identify and investigate computer criminals of all stripes with help from this fully updated. real-world resource. Hacking Exposed Computer Forensics, Second Edition explains how to construct a high-tech forensic lab, collect prosecutable evidence, discover e-mail and system file clues, track wireless activity, and recover obscured documents. Learn how to re-create an attacker's footsteps, communicate with counsel, prepare court-ready reports, and work through legal and organizational challenges. Case studies straight from today's headlines cover IP theft, mortgage fraud, employee misconduct, securities fraud, embezzlement, organized crime, and consumer fraud cases. Effectively uncover, capture, and prepare evidence for investigation Store and process collected data in a highly secure digital forensic lab Restore deleted documents, partitions, user activities, and file systems Analyze evidence gathered from Windows, Linux, and Macintosh systems Use the latest Web and client-based e-mail tools to extract relevant artifacts Overcome the hacker's anti-forensic, encryption, and obscurity techniques Unlock clues stored in cell phones, PDAs, and Windows Mobile devices Prepare legal documents that will hold up to judicial and defense scrutiny Contents......Page 12 Acknowledgments......Page 20 Introduction......Page 22 Part I: Preparing for an Incident......Page 26 Preparing for a Forensics Operation......Page 27 1 The Forensics Process......Page 30 Types of Investigations......Page 31 The Role of the Investigator......Page 34 Elements of a Good Process......Page 37 Defining a Process......Page 40 After the Investigation......Page 43 2 Computer Fundamentals......Page 44 The Bottom-up View of a Computer......Page 45 Types of Media......Page 50 3 Forensic Lab Environment Preparation......Page 66 The Ultimate Computer Forensic Lab......Page 67 Forensic Computers......Page 73 Forensic Hardware and Software Tools......Page 78 The Flyaway Kit......Page 80 Case Management......Page 81 Bonus: Linux or Windows?......Page 84 Part II: Collecting the Evidence......Page 86 Collecting Evidence......Page 87 4 Forensically Sound Evidence Collection......Page 88 Collecting Evidence from a Single System......Page 89 Common Mistakes in Evidence Collection......Page 119 5 Remote Investigations and Collections......Page 122 Privacy Issues......Page 123 Remote Investigations......Page 124 Remote Collections......Page 137 Encrypted Volumes or Drives......Page 147 USB Thumb Drives......Page 150 Part III: Forensic Investigation Techniques......Page 152 We're Not Done. Yet.......Page 153 Finally......Page 154 6 Microsoft Windows Systems Analysis......Page 156 Windows File Systems......Page 157 Recovering Deleted Files......Page 163 Windows Artifacts......Page 175 7 Linux Analysis......Page 186 The Linux File System (ext2 and ext3)......Page 187 Linux Analysis......Page 191 8 Macintosh Analysis......Page 200 The Evolution of the Mac OS......Page 201 Looking at a Mac Disk or Image......Page 203 Deleted Files......Page 211 A Closer Look at Macintosh Files......Page 217 Mac as a Forensics Platform......Page 220 9 Defeating Anti-forensic Techniques......Page 222 Obscurity Methods......Page 223 Privacy Measures......Page 230 10 Enterprise Storage Analysis......Page 246 The Enterprise Data Universe......Page 247 Working with NAS Systems......Page 249 Working with SAN Systems......Page 250 Working with Tapes......Page 251 Full-Text Indexing......Page 256 Mail Servers......Page 259 11 E-mail Analysis......Page 264 Finding E-mail Artifacts......Page 265 Obtaining Web-based E-mail (Webmail) from Online Sources......Page 266 Client-based E-mail......Page 268 Web-Based E-mail......Page 286 Investigating E-mail Headers......Page 292 12 Tracking User Activity......Page 298 Microsoft Office Forensics......Page 299 Tracking Web Usage......Page 308 Operating System User Logs......Page 323 13 Forensic Analysis of Mobile Devices......Page 328 Collecting and Analyzing Mobile Device Evidence......Page 330 Password-protected Windows Devices......Page 356 Conclusion......Page 363 Part IV: Presenting Your Findings......Page 364 He Said, She Said.........Page 365 14 Documenting the Investigation......Page 366 Read Me......Page 367 Internal Report......Page 368 Declaration......Page 371 Affidavit......Page 375 Expert Report......Page 376 15 The Justice System......Page 382 The Criminal Court System......Page 383 The Civil Justice System......Page 384 Expert Status......Page 389 Part V: Putting It All Together......Page 392 Time to Understand the Business Issues......Page 393 16 IP Theft......Page 394 What Is IP Theft?......Page 395 IP Theft Ramifications......Page 396 Types of Theft......Page 398 Tying It Together......Page 414 17 Employee Misconduct......Page 418 What Is Employee Misconduct?......Page 419 Ramifications......Page 420 Types of Misconduct......Page 423 Tying It Together......Page 437 18 Employee Fraud......Page 442 What Is Employee Fraud?......Page 443 Ramifications......Page 444 Types of Employee Fraud......Page 445 Tying It Together......Page 457 19 Corporate Fraud......Page 460 Ramifications......Page 462 Types of Corporate Fraud......Page 464 20 Organized Cyber Crime......Page 478 The Changing Landscape of Hacking......Page 479 Types of Hacks and the Role of Computer Forensics......Page 482 Money Laundering......Page 490 21 Consumer Fraud......Page 496 Ramifications......Page 498 Types of Consumer Fraud......Page 500 Tying It Together......Page 516 A Searching Techniques......Page 518 Regular Expressions......Page 519 B......Page 524 C......Page 525 D......Page 527 E......Page 528 F......Page 531 G......Page 532 I......Page 533 J......Page 534 L......Page 535 M......Page 536 N......Page 537 P......Page 538 R......Page 539 S......Page 540 T......Page 541 V......Page 542 Z......Page 543 The most comprehensive and up-to-date optics resource available

Prepared under the auspices of the Optical Society of America, the five carefully architected and cross-referenced volumes of the Handbook of Optics, Third Edition, contain everything a student, scientist, or engineer requires to actively work in the field. From the design of complex optical systems to world-class research and development methods, this definitive publication provides unparalleled access to the fundamentals of the discipline and its greatest minds.

Individual chapters are written by the world's most renowned experts who explain, illustrate, and solve the entire field of optics. Each volume contains a complete chapter listing for the entire Handbook, extensive chapter glossaries, and a wealth of references. This pioneering work offers unprecedented coverage of optics data, techniques, and applications.

Volume II covers design, fabrications, testing, sources, detectors, radiometry, and photometry.

Publisher's Products purchased from Third Party sellers are not guaranteed by the publisher for quality, authenticity, or access to any online entitlements included with the product. The latest strategies for investigating cyber-crime Identify and investigate computer criminals of all stripes with help from this fully updated. real-world resource. Hacking Exposed Computer Forensics, Second Edition explains how to construct a high-tech forensic lab, collect prosecutable evidence, discover e-mail and system file clues, track wireless activity, and recover obscured documents. Learn how to re-create an attacker's footsteps, communicate with counsel, prepare court-ready reports, and work through legal and organizational challenges. Case studies straight from today's headlines cover IP theft, mortgage fraud, employee misconduct, securities fraud, embezzlement, organized crime, and consumer fraud cases. Investigate computer crime, corporate malfeasance, and hacker break-ins quickly and effectively with help from this practical and comprehensive resource. You'll get expert information on crucial procedures to successfully prosecute violators while avoiding the pitfalls of illicit searches, privacy violations, and illegally obtained evidence. It's all here--from collecting actionable evidence, re-creating the criminal timeline, and zeroing in on a suspect to uncovering obscured and deleted code, unlocking encrypted files, and preparing lawful affidavits. Plus, you'll get in-depth coverage of the latest PDA and cell phone investigation techniques and real-world case studies. Leading experts in computer forensics reveal the secrets and strategies for investigating computer crime, in an updated edition that includes six new chapters that cover IP theft, employee misconduct, securities fraud, embezzlement, organized crime and hacking, and foreign corrupt practices and money laundering. Original. With case studies straight from today's headlines; this reall-world resource explains how to construct a high-tech forensic lab; collect prosecutable evidence; discover e-mail and system file clues; track wireless activity; and recover obscured documents. -- Edited summary from book