Product: 1597495867

Digital forensics is by nature a very technical field and similarly, this book is intended for a technical audience: new digital forensics practitioners or students of the field and current forensics practitioners who are new to open source tools. I am reviewing this book from the point of view of an advanced computer user with knowledge of file systems, system files, and disk sectors from having used Norton Utilities for years and as a technical consultant on some file-sharing cases. Among the things I did was be on-hand to witness the defendant’s drive being imaged by the plaintiff’s expert and reviewing his findings.

The information contained in this book is very thorough and will show you how to set up a workstation on Linux and Windows. Then it teaches you about the file systems and how to look for artifacts on Linux, Windows, and OS X, and examining files using a hex dump. This is not beginner level stuff and requires a high degree of computer literacy. Highly recommended for anyone pursing or currently working in the digital forensics field.
Rating: 5
1597495867
Count: 10