Digital Archaeology: The Art and Science of Digital Forensics

The Definitive, Up-to-Date Guide to Digital Forensics The rapid proliferation of cyber crime is increasing the demand for digital forensics experts in both law enforcement and in the private sector. In Digital Archaeology, expert practitioner Michael Graves has written the most thorough, realistic, and up-to-date guide to the principles and techniques of modern digital forensics. Graves begins by providing a solid understanding of the legal underpinnings of and critical laws affecting computer forensics, including key principles of evidence and case law. Next, he explains how to systematically and thoroughly investigate computer systems to unearth crimes or other misbehavior, and back it up with evidence that will stand up in court. Drawing on the analogy of archaeological research, Graves explains each key tool and method investigators use to reliably uncover hidden information in digital systems. His detailed demonstrations often include the actual syntax of command-line utilities. Along the way, he presents exclusive coverage of facilities management, a full chapter on the crucial topic of first response to a digital crime scene, and up-to-the-minute coverage of investigating evidence in the cloud. Graves concludes by presenting coverage of important professional and business issues associated with building a career in digital forensics, including current licensing and certification requirements. Topics Covered Include Acquiring and analyzing data in ways consistent with forensic procedure Recovering and examining e-mail, Web, and networking activity Investigating users’ behavior on mobile devices Overcoming anti-forensics measures that seek to prevent data capture and analysis Performing comprehensive electronic discovery in connection with lawsuits Effectively managing cases and documenting the evidence you find Planning and building your career in digital forensics Digital Archaeology is a key resource for anyone preparing for a career as a professional investigator; for IT professionals who are sometimes called upon to assist in investigations; and for those seeking an explanation of the processes involved in preparing an effective defense, including how to avoid the legally indefensible destruction of digital evidence.

Table of Contents:
Chapter 1: The Anatomy of a Digital Investigation Chapter 2: Laws Affecting Forensic Investigations Chapter 3: Search Warrants and Subpoenas  Chapter 4: Legislated Privacy Concerns Chapter 5: The Admissibility of Evidence Chapter 6: First Response and the Digital Investigator Chapter 7: Data Acquisition Chapter 8: Finding Lost Files  Chapter 9: Document Analysis Chapter 10: E-mail Forensics Chapter 11: Web Forensics Chapter 12: Searching the Network Chapter 13: Excavating a Cloud Chapter 14: Mobile Device Forensics Chapter 15: Fighting Antiforensics Chapter 16: Litigation and Electronic Discovery Chapter 17: Case Management and Report Writing Chapter 18: Tools of the Digital Investigator Chapter 19: Building a Forensic Workstation Chapter 20: Licensing and Certification Chapter 21: The Business of Digital Forensics Appendix A: Chapter Review Answers Appendix B: Sample Forms  Glossary  Index  

About the Author :
Michael W. Graves has worked for more than fifteen years as a network specialist, security analyst, and forensic analyst. He worked as a contractor for the federal government on jobs involving digital investigations ranging from simple employee violations to potential national security threats, and participated in e-discovery for a major bank. Graves holds an M.S. in digital investigation from Champlain College, where he studied under pioneers Gary Kessler and Robert Simpson, among others. He also served several semesters as adjunct professor of computer science for the college.  

Review :
"For those looking for an introductory text on the topic of digital forensics, Digital Archaeology: The Art and Science of Digital Forensics is an excellent read. Its comprehensive overview of the entire topic, combined with the author's excellent writing skills and experience, make the book a worthwhile reference."   -- Ben Rothke, CISSP – information security manager