Digital forensics : digital evidence in criminal investigation /
Marshall, Angus M.
Digital forensics : digital evidence in criminal investigation / - Chichester, UK ; Hoboken, NJ : Wiley-Blackwell, 2008. - xiv, 165 p. : ill., plans ; 25 cm.
Includes bibliographical references (p. [157]-159), appendices and index.
Preface -- Acknowledgments -- List of tables -- List of figures -- 1. Introduction -- 1.1. Key developments -- 1.2. Digital devices in society -- 1.3. Technology and culture -- 1.4. Comment -- 2. Evidential potential of digital devices -- 2.1. Closed vs. open systems -- 2.2. Evaluating digital evidence potential -- 3. Device handling -- 3.1. Seizure issues -- 3.2. Device identification -- 3.3. Networked devices -- 3.4. Contamination -- 4. Examination principles -- 4.1. Previewing -- 4.2. Imaging -- 4.3. Continuity and hashing -- 4.4. Evidence locations -- 5. Evidence creation -- 5.1. A seven-element security model -- 5.2. A developmental model of digital systems -- 5.3. Knowing -- 5.4. Unknowing -- 5.5. Audit and logs -- 6. Evidence interpretation -- 6.1. Data content -- 6.2. Data context -- 7. Internet activity -- 7.1. A little bit of history -- 7.2. The ISO/OSI model -- 7.3. The Internet protocol suite -- 7.4. DNS --7.5. Internet applications -- 8. Mobile devices -- 8.1. Mobile phones and PDAs -- 8.2. GPS -- 8.3. Other personal technology -- 9. Intelligence -- 9.1. Device usage -- 9.2. Profiling and cyberprofiling -- 9.3. Evaluating online crime : automating the model -- 9.4. Application of the formula to case studies -- 9.5. From success estimates to profiling -- 9.6. Comments -- 10. Case studies and examples -- 10.1. Introduction -- 10.2. Copyright violation -- 10.3. Missing person and murder -- 10.4. The view of a defence witness -- Appendix A. The "Aircraft Carrier" PC -- Appendix B. Additional resources -- B.1. Hard disc and storage laboratory tools -- B.2. Mobile phone/PDA tools -- B.3. Live CDs -- B.4. Recommended reading -- Appendix C. SIM card data report -- References -- Index.
Digital evidence is now regularly used in the investigation of most criminal activities. Taking a holistic approach to the subject, 'Digital Forensics' provides a clear understanding of how digital evidence complements 'traditional' scientific evidence and how it can be used more effectively in a range of criminal investigations.
9780470517741 (cloth) 9780470517741: £70.00 0470517743 (cloth) 0470517751 (pbk.) 9780470517758 (pbk.)
Digital electronics.
Forensic engineering.
Electronic evidence.
Forensic sciences.
Computer crimes--Investigation.
Commercial crimes--Investigation.
363.25968 / MAR
Digital forensics : digital evidence in criminal investigation / - Chichester, UK ; Hoboken, NJ : Wiley-Blackwell, 2008. - xiv, 165 p. : ill., plans ; 25 cm.
Includes bibliographical references (p. [157]-159), appendices and index.
Preface -- Acknowledgments -- List of tables -- List of figures -- 1. Introduction -- 1.1. Key developments -- 1.2. Digital devices in society -- 1.3. Technology and culture -- 1.4. Comment -- 2. Evidential potential of digital devices -- 2.1. Closed vs. open systems -- 2.2. Evaluating digital evidence potential -- 3. Device handling -- 3.1. Seizure issues -- 3.2. Device identification -- 3.3. Networked devices -- 3.4. Contamination -- 4. Examination principles -- 4.1. Previewing -- 4.2. Imaging -- 4.3. Continuity and hashing -- 4.4. Evidence locations -- 5. Evidence creation -- 5.1. A seven-element security model -- 5.2. A developmental model of digital systems -- 5.3. Knowing -- 5.4. Unknowing -- 5.5. Audit and logs -- 6. Evidence interpretation -- 6.1. Data content -- 6.2. Data context -- 7. Internet activity -- 7.1. A little bit of history -- 7.2. The ISO/OSI model -- 7.3. The Internet protocol suite -- 7.4. DNS --7.5. Internet applications -- 8. Mobile devices -- 8.1. Mobile phones and PDAs -- 8.2. GPS -- 8.3. Other personal technology -- 9. Intelligence -- 9.1. Device usage -- 9.2. Profiling and cyberprofiling -- 9.3. Evaluating online crime : automating the model -- 9.4. Application of the formula to case studies -- 9.5. From success estimates to profiling -- 9.6. Comments -- 10. Case studies and examples -- 10.1. Introduction -- 10.2. Copyright violation -- 10.3. Missing person and murder -- 10.4. The view of a defence witness -- Appendix A. The "Aircraft Carrier" PC -- Appendix B. Additional resources -- B.1. Hard disc and storage laboratory tools -- B.2. Mobile phone/PDA tools -- B.3. Live CDs -- B.4. Recommended reading -- Appendix C. SIM card data report -- References -- Index.
Digital evidence is now regularly used in the investigation of most criminal activities. Taking a holistic approach to the subject, 'Digital Forensics' provides a clear understanding of how digital evidence complements 'traditional' scientific evidence and how it can be used more effectively in a range of criminal investigations.
9780470517741 (cloth) 9780470517741: £70.00 0470517743 (cloth) 0470517751 (pbk.) 9780470517758 (pbk.)
Digital electronics.
Forensic engineering.
Electronic evidence.
Forensic sciences.
Computer crimes--Investigation.
Commercial crimes--Investigation.
363.25968 / MAR