The Basics of Digital Forensics: The Primer for Getting Started in Digital Forensics

by John Sammons

The Basics of Digital Forensics provides a foundation for people new to the field of digital forensics. This book teaches you how to conduct examinations by explaining what digital forensics is, the methodologies used, key technical concepts and the tools needed to perform examinations. Details on digital forensics for computers, networks, cell phones, GPS, the cloud, and Internet are discussed. Readers will also learn how to collect evidence, document the scene, and recover deleted data. This is the only resource your students need to get a jump-start into digital forensics investigations. This book is organized into 11 chapters. After an introduction to the basics of digital forensics, the book proceeds with a discussion of key technical concepts. Succeeding chapters cover labs and tools; collecting evidence; Windows system artifacts; anti-forensics; Internet and email; network forensics; and mobile device forensics. The book concludes by outlining challenges and concerns associated with digital forensics. PowerPoint lecture slides are also available. This book will be a valuable resource for entry-level digital forensics professionals as well as those in complimentary fields including law enforcement, legal, and general information security.

Genres: Technology, Textbooks, Nonfiction, Computers

208 pages, Paperback

First published August 1, 2011

Reviews

[Jon · Rating 5 out of 5]

I unfairly, and looking back, embarrassingly, received an autographed copy of the book by answering an audience question to which the
answer was my name during an AIDE conference in 2012 at Marshall University. Though, I did not beat another person to the punch, I
waited, the room was silent. After I answered I then said, "hey, give it someone else", but the giver insisted I keep it to my dismay.
But, hey, now I get to review it :)

This is a very clear and well written introduction to the field of digital forensics. Take note of the book's subtitle
which is nothing less than accurate; It's a primer, and a very good one at that, but nothing more.

Pros:
1.) Presented in an easy to read and clear format
2.) Short, not overwhelming, as a primer ought to be (IMO)
3.) Brief discussions of relevant court cases, crimes, and legal rulings
4.) Covered the hierarchy of digital forensic organizations along with leading institutions and standards
5.) Focus on procedure and practice with an overview of each technology domain e.g. desktop computer, cellular, gps
6.) A chapter devoted to legal aspects and problems of the field

Notes & Misc:
1.) As I would expect, Windows is the only major workstation OS touched upon
2.) This book does not focus on specific tools and applicability but, rather, digital forensics as a whole
3.) I was recently at a UofL/FBI partnered conference at the University of Louisville where agents mentioned the presence of a RCFL on campus.
Thanks to the book I now know a little background on this i.e. FBI started the program and there are 16 facilities in the U.S. (pg. 30)
4.) I learned that there are Faraday bags for cellular and mobile devices (pg. 48)
5.) Most technical books are riddled with errors and typography problems. I was surprised to see that I didn't catch anything (Though, I read it in a car on the way to a vacation spot).
6.) on page 40. "Examples include DNA, latent prints, hair, and fibers.." Since we use hair because it _contains_ DNA the sentence /seems/ tautological but I don't believe it is.

I give it 5 stars because the book lives up to its purpose by being brief in contents but holistic in approach i.e. a perfect primer.

[Robert · Rating 4 out of 5]

Good overview

It provides a basic understanding of digital forensics. Quick read. Unfortunately, with technology rapidly changing, it might be due for an update.

[Kayla · Rating 3 out of 5]

Interesting, but most of the specifics used are incredibly outdated. It's interesting to see what the state of computer forensics was like in 2012.

[A Ivy · Rating 4 out of 5]

Very good overview into the profession of digital forensics. I really enjoyed the sections on memory and storage and the legal regulations concerning discoverable electronic information.

[Paul Sprague · Rating 5 out of 5]

Great Primer

For those just starting out in computer forensics, this book will lay a great foundation to build on. I highly recommend it.

[Bryan · Rating 3 out of 5]

Good book for absolute beginners; if you already have some computing knowledge: skip and find something more advanced.