Python Forensics: A Workbench for Inventing and Sharing Digital Forensic Technology

by Chet Hosmer

Python Forensics provides many never-before-published proven forensic modules, libraries, and solutions that can be used right out of the box. In addition, detailed instruction and documentation provided with the code samples will allow even novice Python programmers to add their own unique twists or use the models presented to build new solutions.

Rapid development of new cybercrime investigation tools is an essential ingredient in virtually every case and environment. Whether you are performing post-mortem investigation, executing live triage, extracting evidence from mobile devices or cloud services, or you are collecting and processing evidence from a network, Python forensic implementations can fill in the gaps.

Drawing upon years of practical experience and using numerous examples and illustrative code samples, author Chet Hosmer discusses how

Develop new forensic solutions independent of large vendor software release schedules Participate in an open-source workbench that facilitates direct involvement in the design and implementation of new methods that augment or replace existing tools Advance your career by creating new solutions along with the construction of cutting-edge automation solutions to solve old problems Provides hands-on tools, code samples, and detailed instruction and documentation that can be put to use immediately Discusses how to create a Python forensics workbench Covers effective forensic searching and indexing using Python Shows how to use Python to examine mobile device operating iOS, Android, and Windows 8 Presents complete coverage of how to use Python scripts for network investigation

Genres: Technology

352 pages, Paperback

First published January 1, 2014

Reviews

[Neal Aggarwal · Rating 5 out of 5]

A very nice collection of complete, working python code that forms real-world use cases demonstrating what can be done with the language. Works with python 2.7 straight out of the box though his web resources make conversion to 3.8 easy. Just a matter of creating a virtual environment with 2.7 installed and keying in the code as-is from the book to see it in action.

As an exercise book helping one sharpen up their python coding skills this book is fabulous. That it puts into the student/practictioner hands a toolbox of code they can use in future is another bonus.