File System Forensic Analysis (Paperback)
暫譯: 檔案系統取證分析 (平裝本)
Brian Carrier
- 出版商: Addison Wesley
- 出版日期: 2005-03-17
- 售價: $2,800
- 貴賓價: 9.5 折 $2,660
- 語言: 英文
- 頁數: 600
- 裝訂: Paperback
- ISBN: 0321268172
- ISBN-13: 9780321268174
-
相關分類:
資訊安全
立即出貨 (庫存 < 3)
買這商品的人也買了...
-
$980$774 -
$1,930$1,834 -
$690$587 -
$780CMMI: Guidelines for Process Integration and Product Improvement (Harcover)
-
$590$466 -
$680$537 -
$1,360$1,292 -
$820$804 -
$750$638 -
$560$476 -
$2,390$2,271 -
$750$593 -
$990$782 -
$650$507 -
$450$383 -
$1,078Operating System Principles, 7/e(IE) (美國版ISBN:0471694665-Operating System Concepts, 7/e) (平裝)
-
$580$452 -
$399$339 -
$620$490 -
$580$452 -
$750$593 -
$560$437 -
$880$748 -
$680$646 -
$880$695
商品描述
Table of Contents:
Foreword.
Preface.
Acknowledgments.
I. FOUNDATIONS.
1. Digital Investigation Foundations.
Digital Investigations and Evidence.
Digital Crime Scene Investigation Process.
Data Analysis.
Overview of Toolkits.
Summary.
Bibliography.
2. Computer Foundations.
Data Organization.
Booting Process.
Hard Disk Technology.
Summary.
Bibiography.
3. Hard Disk Data Acquisition.
Introduction.
Reading the Source Data.
Writing the Output Data.
A Case Study Using dd.
Summary.
Bibliography.
II. VOLUME ANALYSIS.
4. Volume Analysis.
Introduction.
Background.
Analysis Basics.
Summary.
5. PC-based Partitions.
DOS Partitions.
Analysis Considerations.
Apple Partitions.
Removable Media.
Bibliography 109
6. Server-based Partitions.
BSD Partitions.
Sun Solaris Slices.
GPT Partitions.
Summary 145
Bibliography 145
7. Multiple Disk Volumes.
RAID.
Disk Spanning.
Bibliography.
III. FILE SYSTEM ANALYSIS.
8. File System Analysis.
What Is a File System?.
File System Category.
Content Category.
Metadata Category.
File Name Category.
Application Category.
Application-level Search Techniques.
Specific File Systems.
Summary.
Bibliography.
9. FAT Concepts and Analysis.
Introduction.
File System Category.
Content Category.
Metadata Category.
File Name Category.
The Big Picture.
Other Topics.
Summary.
Bibliography.
10. FAT Data Structures.
Boot Sector.
FAT32 FSINFO.
FAT.
Directory Entries.
Long File Name Directory Entries.
Summary.
Bibliography.
11. NTFS Concepts.
Introduction.
Everything is a File.
MFT Concepts.
MFT Entry Attribute Concepts.
Other Attribute Concepts.
Indexes.
Analysis Tools.
Summary.
Bibliography.
12. NTFS Analysis.
File System Category.
Content Category.
Metadata Category.
File Name Category.
Application Category.
The Big Picture.
Other Topics.
Summary.
Bibliography.
13. NTFS Data Structures.
Basic Concepts.
Standard File Attributes.
Index Attributes and Data Structures.
File System Metadata Files.
Summary.
Bibliography.
14. Ext2 and Ext3 Concepts and Analysis.
Introduction.
File System Category.
Content Category.
Metadata Category.
File Name Category.
Application Category.
The Big Picture.
Other Topics.
Summary.
Bibliography.
15. Ext2 and Ext3 Data Structures.
Superblock.
Group Descriptor Tables.
Block Bitmap.
Inodes.
Extended Attributes.
Directory Entry.
Symbolic Link.
Hash Trees.
Journal Data Structures.
Summary.
Bibliography.
16. UFS1 and UFS2 Concepts and Analysis.
Introduction.
File System Category.
Content Category.
Metadata Category.
File Name Category.
The Big Picture.
Other Topics.
Summary.
Bibliography.
17. UFS1 and UFS2 Data Structures.
UFS1 Superblock.
UFS2 Superblock.
Cylinder Group Summary.
UFS1 Group Descriptor.
UFS2 Group Descriptor.
Block and Fragment Bitmaps.
UFS1 Inodes.
UFS2 Inodes.
UFS2 Extended Attributes.
Directory Entries.
Summary.
Bibliography.
Appendix A. The Sleuth Kit and Autopsy.
The Sleuth Kit.
Autopsy.
Bibliography.
Index.
商品描述(中文翻譯)
目錄:
前言
序言
致謝
I. 基礎
1. 數位調查基礎
數位調查與證據
數位犯罪現場調查流程
數據分析
工具包概述
總結
參考文獻
2. 計算機基礎
數據組織
開機過程
硬碟技術
總結
參考文獻
3. 硬碟數據獲取
介紹
讀取源數據
寫入輸出數據
使用 dd 的案例研究
總結
參考文獻
II. 卷分析
4. 卷分析
介紹
背景
分析基礎
總結
5. 基於 PC 的分區
DOS 分區
分析考量
Apple 分區
可移動媒體
參考文獻 109
6. 基於伺服器的分區
BSD 分區
Sun Solaris 切片
GPT 分區
總結 145
參考文獻 145
7. 多磁碟卷
RAID
磁碟跨越
參考文獻
III. 檔案系統分析
8. 檔案系統分析
什麼是檔案系統?
檔案系統類別
內容類別
元數據類別
檔案名稱類別
應用程式類別
應用程式層級搜尋技術
特定檔案系統
總結
參考文獻
9. FAT 概念與分析
介紹
檔案系統類別
內容類別
元數據類別
檔案名稱類別
大局觀
其他主題
總結
參考文獻
10. FAT 數據結構
開機區
FAT32 FSINFO
FAT
目錄項目
長檔名目錄項目
總結
參考文獻
11. NTFS 概念
介紹
一切皆檔案
MFT 概念
MFT 項目屬性概念
其他屬性概念
索引