A Practical Guide to Digital Forensics Investigations

Introduction

The Scope of Digital Forensics

• Popular Myths about Computer Forensics
• Types of Digital Forensic Evidence Recovered
• What Skills Must a Digital Forensics Investigator Possess?
• The Importance of Digital Forensics
• Job Opportunities
• A History of Digital Forensics
• Training and Education
• Summary

Windows Operating and File Systems

• Physical and Logical Storage
• Paging
• File Conversion and Numbering Formats
• Operating Systems
• Windows Registry
• Microsoft Office
• Microsoft Windows Features
• Summary

Handling Computer Hardware

• Hard Disk Drives
• Cloning a PATA or SATA Hard Disk
• Removable Memory
• Summary
• Reference

Acquiring Evidence in a Computer Forensics Lab

• Lab Requirements
• Private-Sector Computer Forensics Laboratories
• Computer Forensics Laboratory Requirements
• Extracting Evidence from a Device
• Skimmers
• Steganography
• Summary

Online Investigations

• Working Undercover
• Dark Web Investigations
• Virtual Currencies
• Website Evidence
• Background Searches on a Suspect
• Online Crime
• Capturing Online Communications
• Edge Web Browser
• Summary

Documenting the Investigation

• Obtaining Evidence from a Service Provider
• Documenting a Crime Scene
• Seizing Evidence
• Documenting the Evidence
• Using Tools to Document an Investigation
• Writing Reports
• Using Expert Witnesses at Trial
• Summary

Admissibility of Digital Evidence

• History and Structure of the United States Legal System
• Evidence Admissibility
• Constitutional Law
• When Computer Forensics Goes Wrong
• Structure of the Legal System in the European Union (E.U.)
• Privacy Legislation in Asia
• Summary

Network Forensics and Incident Response

• The Tools of the Trade
• Networking Devices
• Understanding the OSI Model
• Introduction to VoIP
• Incident Response (IR)
• STIX, TAXII, and Cybox
• Advanced Persistent Threats
• Investigating a Network Attack
• Summary

Mobile Forensics

• The Cellular Network
• Handset Specifications
• Mobile Operating Systems
• Standard Operating Procedures for Handling Handset Evidence
• Handset Forensics
• Manual Cellphone Examinations
• Global Satellite Service Providers
• Legal Considerations
• Other Mobile Devices
• Documenting the Investigation
• Summary

Mobile App Investigations

• Static Versus Dynamic Analysis
• Dating Apps
• Rideshare Apps
• Communication Apps
• Summary

Photograph Forensics

• National Center for Missing and Exploited Children (NCMEC)
• Project VIC
• Case Studies
• Understanding Digital Photography
• Examining Picture Files
• Evidence Admissibility
• Case Studies
• Summary

Mac Forensics

• A Brief History
• Apple Wi-Fi Devices
• Macintosh File Systems
• Macintosh Operating Systems
• Apple Mobile Devices
• Performing a Mac Forensics Examination
• Case Studies
• Summary

Case Studies

• Silk Road
• Las Vegas Massacre
• Zacharias Moussaoui
• BTK (Bind Torture Kill) Serial Killer
• Cyberbullying
• Sports
• Summary

Internet of Things (IoT) Forensics and Emergent Technologies

• 5G
• Wi-Fi 6
• Wi-Fi Mesh Networks
• Shodan
• Mirai Botnet
• Cryptocurrency Mining
• Alexa
• Micro-Chipping
• Fitness Trackers
• Apple Watch
• Action Cameras
• Police Safety
• Police Vehicles
• Vehicle Forensics
• Low-Tech Solution for High-Tech Seizures
• Summary