Practical Guide to Digital Forensics Investigations, A

THE DEFINITIVE GUIDE TO DIGITAL FORENSICS—NOW THOROUGHLY UPDATED WITH NEW TECHNIQUES, TOOLS, AND SOLUTIONS

Complete, practical coverage of both technical and investigative skills

Thoroughly covers modern devices, networks, and the Internet

Addresses online and lab investigations, documentation, admissibility, and more

Aligns closely with the NSA Knowledge Units and the NICE Cybersecurity Workforce Framework

As digital crime soars, so does the need for experts who can recover and evaluate evidence for successful prosecution. Now, Dr. Darren Hayes has thoroughly updated his definitive guide to digital forensics investigations, reflecting current best practices for securely seizing, extracting and analyzing digital evidence, protecting the integrity of the chain of custody, effectively documenting investigations, and scrupulously adhering to the law, so that your evidence is admissible in court.

Every chapter of this new Second Edition is revised to reflect newer technologies, the latest challenges, technical solutions, and recent court decisions. Hayes has added detailed coverage of wearable technologies, IoT forensics, 5G communications, vehicle forensics, and mobile app examinations; advances in incident response; and new iPhone and Android device examination techniques. Through practical activities, realistic examples, and fascinating case studies, you’ll build hands-on mastery—and prepare to succeed in one of today’s fastest-growing fields.

LEARN HOW TO



Understand what digital forensics examiners do, the evidence they work with, and the opportunities available to themExplore how modern device features affect evidence gathering, and use diverse tools to investigate themEstablish a certified forensics lab and implement best practices for managing and processing evidenceGather data online to investigate today’s complex crimesUncover indicators of compromise and master best practices for incident responseInvestigate financial fraud with digital evidenceUse digital photographic evidence, including metadata and social media imagesInvestigate wearable technologies and other “Internet of Things” devicesLearn new ways to extract a full fi le system image from many iPhonesCapture extensive data and real-time intelligence from popular appsFollow strict rules to make evidence admissible, even after recent Supreme Court decisions