Real Digital Forensics: Computer Security and Incident Response

by Keith J. Jones, Richard Bejtlich, Curtis Rose

An interactive book-and-DVD package designed to help readers master the tools and techniques of forensic analysis offers a hands-on approach to identifying and solving problems related to computer security issues; introduces the tools, methods, techniques, and applications of computer forensic investigation; and allows readers to test skills by working with real data with the help of five scenarios. Original. (Intermediate)

Genres: Computer Science, Reference, Technical, Computers, Technology, Programming

688 pages, Paperback

First published October 3, 2005

Reviews

[Takedown · Rating 4 out of 5]

I love how old this book is and yet how relevant those topics are today.
Incident Response is way more important today than back then, but it blows my mind that some people started doing it way back before it became mainstream. Truly pioneers of the field.
It is a practical, hands-on DFIR book, however most of the tools is outdated. This is expected for any technical books, that focus on tools.
It is still useful and relevant today since methods largely the same, so worth a read anyway. You just have to find a tools yourself.

[Trevlix · Rating 5 out of 5]

If you want a book which will SHOW, and not just tell you, how to do forensics on Windows and Linux as well as network forensics and malware analysis, this is the book for you. Written by definite experts in the industry.

I would normally give this a 5, but there are a few minor typos which spoiled it for me. They also left out a few explanations which I thought should be in there. Still worth having on your bookshelf.

[Justine · Rating 4 out of 5]

Good practical tools - fairly easy to read and understand - not a whole lot of concepts; this was mainly a "how-to" guide on a lot of related, but independent tools & processes.

[Thad Butterworth · Rating 3 out of 5]

Dry, but full of good information.