Digital Forensics Basics: A Practical Guide Using Windows OS

by Nihad A Hassan

Use this hands-on, introductory guide to understand and implement digital forensics to investigate computer crime using Windows, the most widely used operating system. This book provides you with the necessary skills to identify an intruder's footprints and to gather the necessary digital evidence in a forensically sound manner to prosecute in a court of law. Directed toward users with no experience in the digital forensics field, this book provides guidelines and best practices when conducting investigations as well as teaching you how to use a variety of tools to investigate computer crime. You will be prepared to handle problems such as law violations, industrial espionage, and use of company resources for private use.
Digital Forensics Basics is written as a series of tutorials with each task demonstrating how to use a specific computer forensics tool or technique. Practical information is provided and users can read a task and then implement it directly on their devices. Some theoretical information is presented to define terms used in each technique and for users with varying IT skills.
What You’ll Learn
Who This Book Is For Police and other law enforcement personnel, judges (with no technical background), corporate and nonprofit management, IT specialists and computer security professionals, incident response team members, IT military and intelligence services officers, system administrators, e-business security professionals, and banking and insurance professionals

357 pages, Paperback

Published February 26, 2019

Reviews

[Ben Rothke · Rating 4 out of 5]

For any network of significant size, the question is not if there will be a breach, but when the breach will happen. And when that breach occurs, there are generally two goals at hand—get the intruders out and determine who they were.

In Digital Forensics Basics: A Practical Guide Using Windows OS, author Nihad Hassan has written a practical, hands-on guide that can help the novice user get up to speed on Windows forensics.

The book starts with an introduction to the core concepts of digital forensics and technical concepts around file systems. It then progresses to the steps needed to investigate an incident, including gathering and analyzing data. The author explores several software tools that can be used in the investigation process.

Written for those with little to no background in digital forensics, the book walks the reader through the various actions involved. The book covers only the Microsoft Windows operating system; therefore, if the affected systems are Macintosh or Linux, this book does not address them.

While far from a definitive reference, this book is a reliable guide. For those looking for a practical introduction to digital forensics, this is an excellent book to start with.

[David · Rating 5 out of 5]

This was an excellent resource for beginning students of digital forensics. Periodically, I read a few books on the subject of digital forensics and look to incorporate the information into teaching my students. This book breaks down difficult concepts to new students in a manner that helps them understand the topic. Excellent resource and well-written text. Highly recommend for those interested in understanding digital forensics at a basic level.