The Basics of Digital Forensics

by John Sammons

The Basics of Digital Forensics provides a foundation for people new to the digital forensics field. This book offers guidance on how to conduct examinations by discussing what digital forensics is, the methodologies used, key tactical concepts, and the tools needed to perform examinations. Details on digital forensics for computers, networks, cell phones, GPS, the cloud and the Internet are discussed. Also, learn how to collect evidence, document the scene, and how deleted data can be recovered. The new Second Edition of this book provides the reader with real-world examples and all the key technologies used in digital forensics, as well as new coverage of network intrusion response, how hard drives are organized, and electronic discovery. This valuable resource also covers how to incorporate quality assurance into an investigation, how to prioritize evidence items to examine (triage), case processing, and what goes into making an expert witness.

Genres: Technology, Textbooks, Nonfiction, Computers

200 pages, Paperback

First published August 1, 2011

Reviews

[Jon · Rating 5 out of 5]

I unfairly, and looking back, embarrassingly, received an autographed copy of the book by answering an audience question to which the
answer was my name during an AIDE conference in 2012 at Marshall University. Though, I did not beat another person to the punch, I
waited, the room was silent. After I answered I then said, "hey, give it someone else", but the giver insisted I keep it to my dismay.
But, hey, now I get to review it :)

This is a very clear and well written introduction to the field of digital forensics. Take note of the book's subtitle
which is nothing less than accurate; It's a primer, and a very good one at that, but nothing more.

Pros:
1.) Presented in an easy to read and clear format
2.) Short, not overwhelming, as a primer ought to be (IMO)
3.) Brief discussions of relevant court cases, crimes, and legal rulings
4.) Covered the hierarchy of digital forensic organizations along with leading institutions and standards
5.) Focus on procedure and practice with an overview of each technology domain e.g. desktop computer, cellular, gps
6.) A chapter devoted to legal aspects and problems of the field

Notes & Misc:
1.) As I would expect, Windows is the only major workstation OS touched upon
2.) This book does not focus on specific tools and applicability but, rather, digital forensics as a whole
3.) I was recently at a UofL/FBI partnered conference at the University of Louisville where agents mentioned the presence of a RCFL on campus.
Thanks to the book I now know a little background on this i.e. FBI started the program and there are 16 facilities in the U.S. (pg. 30)
4.) I learned that there are Faraday bags for cellular and mobile devices (pg. 48)
5.) Most technical books are riddled with errors and typography problems. I was surprised to see that I didn't catch anything (Though, I read it in a car on the way to a vacation spot).
6.) on page 40. "Examples include DNA, latent prints, hair, and fibers.." Since we use hair because it _contains_ DNA the sentence /seems/ tautological but I don't believe it is.

I give it 5 stars because the book lives up to its purpose by being brief in contents but holistic in approach i.e. a perfect primer.

[Robert · Rating 4 out of 5]

Good overview

It provides a basic understanding of digital forensics. Quick read. Unfortunately, with technology rapidly changing, it might be due for an update.

[Kayla · Rating 3 out of 5]

Interesting, but most of the specifics used are incredibly outdated. It's interesting to see what the state of computer forensics was like in 2012.

[A Ivy · Rating 4 out of 5]

Very good overview into the profession of digital forensics. I really enjoyed the sections on memory and storage and the legal regulations concerning discoverable electronic information.

[Paul Sprague · Rating 5 out of 5]

Great Primer

For those just starting out in computer forensics, this book will lay a great foundation to build on. I highly recommend it.

[Bryan · Rating 3 out of 5]

Good book for absolute beginners; if you already have some computing knowledge: skip and find something more advanced.