Electronic discovery refers to a process in which electronic data is sought, located, secured, and searched with the intent of using it as evidence in a legal case. Computer forensics is the application of computer investigation and analysis techniques to perform an investigation to find out exactly what happened on a computer and who was responsible. IDC estimates that the U.S. market for computer forensics will be grow from $252 million in 2004 to $630 million by 2009. Business is strong outside the United States, as well. By 2011, the estimated international market will be $1.8 billion dollars. The Techno Forensics Conference has increased in size by almost 50% in its second year; another example of the rapid growth in the market. This book is the first to combine cybercrime and digital forensic topics to provides law enforcement and IT security professionals with the information needed to manage a digital investigation. Everything needed for analyzing forensic data and recovering digital evidence can be found in one place, including instructions for building a digital forensics lab. * Digital investigation and forensics is a growing industry * Corporate I.T. departments needing to investigate incidents related to corporate espionage or other criminal activities are learning as they go and need a comprehensive step-by-step guide to e-discovery * Appeals to law enforcement agencies with limited budgets.
Ch. 1. Computer forensics in today's world -- Ch. 2. Digital forensics: an overview -- Ch. 3. Developing an enterprise digital investigative/electronic discovery capability -- Ch. 4. Integrating a quality assurance program in a digital forensic laboratory -- Ch. 5. Balancing e-discovery challenges with legal and IT requirements -- Ch. 6. Forensic software and hardware -- Ch. 7. Incident response: live forensics and investigations -- Ch. 8. Seizure of digital information -- Ch. 9. Conducting cyber investigations -- Ch. 10. Acquiring data, duplicating data, and recovering deleted files -- Ch. 11. Forensic disovery and analysis using BackTrack -- Ch. 12. Windows, Linux, and Macintosh boot processes -- Ch. 13. Windows and Linux forensics -- Ch. 14. Investigating network traffic and investigating logs -- Ch. 15. Router forensics and network forensics -- Ch. 16. Investigating wireless attacks -- Ch. 17. E-mail forensics -- Ch. 18. Steganography and application password crackers -- Ch. 19. PDA and Blackberry -- Ch. 20. MP3 forensics.
E-book
