Digital Forensics

Digital Forensics: Threatscape and Best Practices surveys the problems and challenges confronting digital forensic professionals today, including massive data sets and everchanging technology. This book provides a coherent overview of the threatscape in a broad range of topics, providing practitioners and students alike with a comprehensive, coherent overview of the threat landscape and what can be done to manage and prepare for it. Digital Forensics: Threatscape and Best Practices delivers you with incisive analysis and best practices from a panel of expert authors, led by John Sammons, bestselling author of The Basics of Digital Forensics.

• Learn the basics of cryptocurrencies (like Bitcoin) and the artifacts they generate
• Learn why examination planning matters and how to do it effectively
• Discover how to incorporate behaviorial analysis into your digital forensics examinations
• Stay updated with the key artifacts created by the latest Mac OS, OS X 10.11, El Capitan
• Discusses the threatscapes and challenges facing mobile device forensics, law enforcement,
  and legal cases
• The power of applying the electronic discovery workflows to digital forensics
• Discover the value of and impact of social media forensics

Information Security professionals of all levels, digital forensic examiners and investigators, InfoSec consultants, hackers, penetration testers, government officials and law enforcement officers

• Dedication
• List of Contributors
• Editor Biography
• Biographies
• Acknowledgments
• Chapter 1: The cryptocurrency enigma

  • Abstract
  • Purpose
  • Introduction
  • What makes a currency?
  • Cryptocurrency
  • Public key encryption basics
  • Forensic relevance
  • Bitcoin
  • Bitcoin protocol
  • Forensic artifacts
  • Multibit HD
  • The bitcoin protocol in action
  • Summary
• Chapter 2: The key to forensic success: examination planning is a key determinant of efficient and effective digital forensics

  • Abstract
  • Introduction
  • The four phases of digital forensics
  • It is a matter of questions
  • Investigative questions
  • Legal questions
  • Forensic questions
  • Identification
  • Classification/individualization
  • Association
  • Reconstruction
  • Forensic questions as a bridge
  • Developing forensic hypotheses
  • Knowing how far to go
  • Starting the plan
  • How do you know when you are done?
  • Examination phase – data extraction
  • The forensic analysis
  • The examination planning process
  • Conclusion
• Chapter 3: Psychological profiling as an investigative tool for digital forensics

  • Abstract
  • Current model
  • Issues
  • New model
  • Phases
  • Limitations
  • Case studies
  • Conclusions
• Chapter 4: The intersection between social media, crime, and digital forensics: #WhoDunIt?

  • Abstract
  • Introduction
  • Social media and crime
  • Social media and digital forensics
  • Social media evidence on the network
  • Social media evidence on the physical device
  • Summary
  <