Read more
Informationen zum Autor John Sammons (Huntington, WV) is an assistant professor at Marshall University teaching digital forensics, electronic discovery, and information security. He is a member of the FBI's West Virginia Cybercrime Task Force and founder and director of the Appalachian Institute of Digital Evidence (AIDE). John is a contract instructor for AccessData and is certified as both an instructor and an examiner. Klappentext "Learn how to use AccessData's Forensic Toolkit (FTK) while mastering the fundamentals of digital forensics" "Digital Forensics with the AccessData Forensic Toolkit (FTK)" provides a comprehensive review of essential digital forensics concepts and builds on this information to teach you how to conduct digital investigations with AccessData's FTK--the industry-standard, court-accepted digital investigations platform. Part I covers the technology all digital forensics investigators need to understand, specifically data, storage media, file systems, and registry files. Part II explains how best to use FTK 5 tools, including FTK imager, FTK registry viewer, and the Password Recovery Toolkit (PRTK), to conduct legally defensible investigations. Written by a digital forensics expert and AccessData instructor Perfect self-study guide for the AccessData Certified Examiner (ACE) exam "Kit Trick" notes highlight best practices for using FTK "Case File" sidebars feature insights from actual digital forensic investigators Inhaltsverzeichnis Part I: Forensics Fundamentals Chapter 1: Digital Forensics Chapter 2: Data Storage Chapter 3: File Systems Chapter 4: Windows Registry Chapter 5: Windows Artifacts Part II: AccessData's Forensic Toolkit (FTK) Chapter 6: Introduction to FTK Chapter 7: FTK Basics Chapter 8: FTK Advanced Chapter 9: FTK Imager Chapter 10: FTK Registry Viewer Chapter 11: Password Recovery Toolkit Chapter 12: Visualization in FTK Chapter 13: Explicit Image Detection Chapter 14: Cerberus Chapter 15: The ACE Test Glossary ...
