Incident Response & Computer Forensics, 2nd Ed. - Tapa blanda

Completely Updated with the Latest Techniques--Contains All-New Forensics Content and Real-World Scenarios

"An insider's look at the legal, procedural and technical steps of computer forensics and analysis." --Information Security magazine

"This book is an absolute must-read for anyone who plays a role in responding to computer security events." --Marc J. Zwillinger, former trial attorney with the U.S. Dept. of Justice, Computer Crime & Intellectual Property

"An excellent resource for information on how to respond to computer intrusions and conduct forensic investigations." --Network Magazine

"If your job requires you to review the contents of a computer system for evidence of unauthorized or unlawful activities, this is the book for you. The authors, through real-world experiences, demonstrate both technically and procedurally the right way to perform computer forensics and respond to security incidents." --Howard A. Schmidt, Former Special Advisor for Cyber Security, White House, and former Chief Security Officer, Microsoft Corp.

New and Updated Material:

• New real-world scenarios throughout
• The latest methods for collecting live data and investigating Windows and UNIX systems
• Updated information on forensic duplication
• New chapter on emergency network security monitoring
• New chapter on corporate evidence handling procedures
• New chapter on data preparation with details on hard drive interfaces and data storage principles
• New chapter on data extraction and analysis
• The latest techniques for analyzing network traffic
• Up-to-date methods for investigating and assessing hacker tools

Foreword by former FBI Special Agent Scott Larson