
Integrating Python with Leading Computer Forensics Platforms
Description
Key Features
- Provides hands-on tools, code samples, detailed instruction, and documentation that can be immediately put to use
- Shows how to integrate Python with popular digital forensic platforms, including EnCase, MPE+, The Open Source Autopsy/SleuthKit, and US-LATT
- Presents complete coverage of how to use Open Source Python scripts to extend and modify popular digital forensic Platforms
Readership
Digital forensic professionals and analysts, information security professionals, researchers, and practitioners, legal professionals, law enforcement officers, as well as students in digital forensics criminal justice programs at university
Table of Contents
- Dedication
- Author Biography
- Preface
- Acknowledgments
- Chapter 1: Integrating Python With Forensics Platforms
- Abstract
- Introduction
- What Is the Python Value Proposition for Forensics?
- Resources
- What Are the Possible Integration Points and Methods?
- Why Open Source?
- What Forensic Platforms Are Covered?
- Keys to Success
- Review
- Chapter 2: Key Python Language Elements for Forensics
- Abstract
- Introduction
- Quick Overview of the Python Environment
- Python Forensics Source Code Template SRC-2-1.py
- Basic Forensic Script SRC-2-2.py
- Review
- Challenge Problems
- Chapter 3: Integrating Python With MPE+
- Abstract
- Introduction
- Building and MPE+ Python Template
- Creating a HashSearch MPE+ Python Script
- Review
- Challenge Problems
- Chapter 4: Integrating Python With EnCase/EnScripts
- Abstract
- Introduction
- EnCase Integration Points
- Review
- Challenge Problems
- Chapter 5: Integrating Python With Leading Forensic Platforms
- Abstract
- Introduction
- Postprocessing of US-LATT Acquisition
- Review
- Challenge Problems
- Chapter 6: Integrating Python With Leading Forensic Platforms
- Abstract
- Introduction
- Integrating Python With Autopsy
- Review
- Challenge Problems
- Chapter 7: Future Look and an Integration Challenge Problem
- Abstract
- The Future
- Review
- Index
Product details
- No. of pages: 216
- Language: English
- Copyright: © Syngress 2016
- Published: September 21, 2016
- Imprint: Syngress
- Paperback ISBN: 9780128099490
- eBook ISBN: 9780128099506
About the Author
Chet Hosmer
Chet makes numerous appearances each year to discuss emerging cyber threats including National Public Radio's Kojo Nnamdi show, ABC's Primetime Thursday, NHK Japan and ABC News Australia. He is also a frequent contributor to technical and news stories relating to cyber security and forensics and has been interviewed and quoted by IEEE, The New York Times, The Washington Post, Government Computer News, Salon.com, DFI News and Wired Magazine.
He is the author of three recent Elsevier/Syngress Books: Python Passive Network Mapping: ISBN-13: 978-0128027219, Python Forensics: ISBN-13: 978-0124186767 and Data Hiding which is co/authored with Mike Raggo: ISBN-13: 978-1597497435. Chet delivers keynote and plenary talks on various cyber security related topics around the world each year.
Affiliations and Expertise
Ratings and Reviews
There are currently no reviews for "Integrating Python with Leading Computer Forensics Platforms"