Picture 1 of 1
Gallery
Picture 1 of 1
Practical Forensic Imaging: Securing Digital Evidence with Linux Tools by Nikkel
US $64.23
Approximately£47.79
Condition:
New
A new, unread, unused book in perfect condition with no missing or damaged pages. See the seller's listing for full details.
- Buy it nowPractical Forensic Imaging: Securing Digital Evidence with Linux Tools by Nikkel
Oops! Looks like we're having trouble connecting to our server.
Refresh your browser window to try again.
Postage:
Free Standard Shipping.
Located in: Sparks, Nevada, United States
Delivery:
Estimated between Fri, 2 May and Tue, 6 May to 43230
Returns:
30 days return. Buyer pays for return postage. If you use an eBay delivery label, it will be deducted from your refund amount.
Payments:
Shop with confidence
Seller assumes all responsibility for this listing.
eBay item number:284319444030
Item specifics
- Condition
- Book Title
- Practical Forensic Imaging: Securing Digital Evidence with Linux
- Publication Date
- 2016-09-01
- Pages
- 324
- ISBN
- 9781593277932
About this product
Product Identifiers
Publisher
No Starch Press, Incorporated
ISBN-10
1593277938
ISBN-13
9781593277932
eBay Product ID (ePID)
227722759
Product Key Features
Number of Pages
324 Pages
Publication Name
Practical Forensic Imaging : Securing Digital Evidence with Linux Tools
Language
English
Publication Year
2016
Subject
Operating Systems / Linux, Security / Cryptography, Security / General, System Administration / Disaster & Recovery, Evidence
Type
Textbook
Subject Area
Law, Computers
Format
Trade Paperback
Dimensions
Item Height
0.8 in
Item Weight
21.5 Oz
Item Length
9.2 in
Item Width
6.9 in
Additional Product Features
Intended Audience
Trade
LCCN
2016-026449
Reviews
"Despite the huge impact of this subject matter, there have been precious few books on the topic to date. Luckily, Practical Forensic Imaging steps in now to fill the gap. An excellent addition to any bookshelf." --Forensic Focus "I am a big fan of this book, and found it to contain the right amount of technical content coupled with important concepts and concerns surrounding forensic imaging. I'd encourage anyone in DFIR who is imaging regularly or looking to increase their Linux skills to check out a copy of the book." --505 Forensics "Cybercrime and digital forensics expert Bruce Nikkel describes the use of open source command line technology to obtain and manage forensic data. Target readers are the expanding number of forensic practitioners including forensic and electronic discovery technicians in legal, auditing, and consulting firms; incident response teams; law enforcement forensic specialists; and forensic investigators." --The Lawyer's PC "It's commonly said that you should assume the bad guys have already breached your networks. The ability to carry out forensic examinations is one of the key skills you'll need in response to that risk, and this book is a solid introduction to acquiring those skills." --Network Security Newsletter "I loved Bruce Nikkel's book Practical Forensic Imaging from @nostarch - but his new book Practical Linux Forensics is [fire]. Beginner to intermediate, and a good desktop reference." --DFIRScience, @DFIRScience
Dewey Edition
23
Illustrated
Yes
Dewey Decimal
363.25/9680285586
Table Of Content
Introduction Chapter 0: Digital Forensics Overview Chapter 1: Storage Media Overview< Chapter 2: Linux as a Forensic Acquisition Platform Chapter 3: Forensic Image Formats Chapter 4: Planning and Preparation Chapter 5: Attaching Subject Media to an Acquisition Host Chapter 6: Forensic Image Acquisition Chapter 7: Forensic Image Management Chapter 8: Special Image Access Topics Chapter 9: Extracting Subsets of Forensic Images
Synopsis
Forensic image acquisition is an important part of postmortem incident response and evidence collection. Digital forensic investigators acquire, preserve, and manage digital evidence to support civil and criminal cases; examine organizational policy violations; resolve disputes; and analyze cyber attacks. Practical Forensic Imaging takes a detailed look at how to secure and manage digital evidence using Linux-based command line tools. This essential guide walks you through the entire forensic acquisition process and covers a wide range of practical scenarios and situations related to the imaging of storage media. You ll learn how to: Perform forensic imaging of magnetic hard disks, SSDs and flash drives, optical discs, magnetic tapes, and legacy technologies Protect attached evidence media from accidental modification Manage large forensic image files, storage capacity, image format conversion, compression, splitting, duplication, secure transfer and storage, and secure disposal Preserve and verify evidence integrity with cryptographic and piecewise hashing, public key signatures, and RFC-3161 timestamping Work with newer drive and interface technologies like NVME, SATA Express, 4K-native sector drives, SSHDs, SAS, UASP/USB3x, and Thunderbolt Manage drive security such as ATA passwords; encrypted thumb drives; Opal self-encrypting drives; OS-encrypted drives using BitLocker, FileVault, and TrueCrypt; and others Acquire usable images from more complex or challenging situations such as RAID systems, virtual machine images, and damaged media With its unique focus on digital forensic acquisition and evidence preservation, Practical Forensic Imaging is a valuable resource for experienced digital forensic investigators wanting to advance their Linux skills and experienced Linux administrators wanting to learn digital forensics. This is a must-have reference for every digital forensics lab., Forensic image acquisition is an important part of postmortem incident response and evidence collection. Digital forensic investigators acquire, preserve, and manage digital evidence to support civil and criminal cases; examine organizational policy violations; resolve disputes; and analyze cyber attacks. Practical Forensic Imaging takes a detailed look at how to secure and manage digital evidence using Linux-based command line tools. This essential guide walks you through the entire forensic acquisition process and covers a wide range of practical scenarios and situations related to the imaging of storage media. You'll learn how to: -Perform forensic imaging of magnetic hard disks, SSDs and flash drives, optical discs, magnetic tapes, and legacy technologies -Protect attached evidence media from accidental modification -Manage large forensic image files, storage capacity, image format conversion, compression, splitting, duplication, secure transfer and storage, and secure disposal -Preserve and verify evidence integrity with cryptographic and piecewise hashing, public key signatures, and RFC-3161 timestamping -Work with newer drive and interface technologies like NVME, SATA Express, 4K-native sector drives, SSHDs, SAS, UASP/USB3x, and Thunderbolt -Manage drive security such as ATA passwords; encrypted thumb drives; Opal self-encrypting drives; OS-encrypted drives using BitLocker, FileVault, and TrueCrypt; and others -Acquire usable images from more complex or challenging situations such as RAID systems, virtual machine images, and damaged media With its unique focus on digital forensic acquisition and evidence preservation, Practical Forensic Imaging is a valuable resource for experienced digital forensic investigators wanting to advance their Linux skills and experienced Linux administrators wanting to learn digital forensics. This is a must-have reference for every digital forensics lab.
LC Classification Number
HV8079.C65N55 2016
Item description from the seller
Seller business information
About this seller
AlibrisBooks
98.5% positive Feedback•1.9M items sold
Registered as a business seller
Seller Feedback (501,885)
- a***e- Feedback left by buyer.Past monthVerified purchaseProfessional Seller; Wide Inventory Selection; Competitive Prices; Great Communication; FAST Ship; Item Safely & Well-Packaged; Item Accurately Described in Listing; Item of High Quality and in Mint Condition; Appearance of Item is Great! Highly Recommended; Hope to Do Business with Again! Thank You Very Much!
- m***u (849)- Feedback left by buyer.Past 6 monthsVerified purchaseAbsolutely delightful seller! As pictured and described, fast shipping, and great communication! Excellent packaging and a phenomenal value! This seller is an extremely valuable asset to the eBay community! A++++! ✨🥇✨
- a***a (346)- Feedback left by buyer.Past 6 monthsVerified purchaseThis hardback book is of the highest quality, has a fine appearance , arrived in perfect condition, and is an excellent value. On what I was not asked about this time, communicating with the seller would have required using email outside of the eBay system, because they do not accept eBay messages, the book was well packed in a purpose-designed cardboard box, the shipping was faster than I expected for the bound media rate, and the book was exactly as described and pictured.Tameshigiri - The History and Development of Japanese Sword Testing by Sesko (#282906424466)
Product ratings and reviews
Most relevant reviews
- 15 Aug, 2018
Perfect guide to storage forensics.
Verified purchase: YesCondition: NewSold by: goodz-limited
More to explore:
- Forensics Books,
- Forensics Non-Fiction Hardcover Books,
- Non-Fiction Forensics Paperback Fiction & Books,
- Forensics Adult Learning & University Books in English,
- Practical Television Magazines,
- Practical Motorist Magazines,
- Practical Electronics Magazines,
- Practical Woodworking Magazines,
- Practical Wireless Magazines,
- October Practical Wireless Magazines
Seller Feedback (501,885)
- a***e- Feedback left by buyer.Past monthVerified purchaseProfessional Seller; Wide Inventory Selection; Competitive Prices; Great Communication; FAST Ship; Item Safely & Well-Packaged; Item Accurately Described in Listing; Item of High Quality and in Mint Condition; Appearance of Item is Great! Highly Recommended; Hope to Do Business with Again! Thank You Very Much!
- m***u (849)- Feedback left by buyer.Past 6 monthsVerified purchaseAbsolutely delightful seller! As pictured and described, fast shipping, and great communication! Excellent packaging and a phenomenal value! This seller is an extremely valuable asset to the eBay community! A++++! ✨🥇✨
- a***a (346)- Feedback left by buyer.Past 6 monthsVerified purchaseThis hardback book is of the highest quality, has a fine appearance , arrived in perfect condition, and is an excellent value. On what I was not asked about this time, communicating with the seller would have required using email outside of the eBay system, because they do not accept eBay messages, the book was well packed in a purpose-designed cardboard box, the shipping was faster than I expected for the bound media rate, and the book was exactly as described and pictured.Tameshigiri - The History and Development of Japanese Sword Testing by Sesko (#282906424466)