CompTIA CSA+ Cybersecurity Analyst Certification All-in-One Exam Guide (CS0-001) (EBook) by Maymi Fernando & Chapman Brent
Author:Maymi, Fernando & Chapman, Brent [Maymi, Fernando]
Language: eng
Format: azw3
Publisher: McGraw-Hill Education
Published: 2017-09-01T04:00:00+00:00
Forensic Duplicators
Forensic duplicators are systems that copy data from a source to a destination while ensuring that not even a single bit gets altered in the process. What sets them apart from any copying utility is that they do not rely on file system operations, which means they can recover file system artifacts such as the Master File Table (MFT) in Windows systems and the inode table in Linux ones.
dd The venerable workhorse in Linux is the dd utility that comes by default with most systems. Because almost everything in the extended file system (ext) used in Linux is a “file” (even network connections and peripheral devices), dd can duplicate data across files, devices, partitions, and volumes. The following command will do a bit-for-bit copy of hard drive “hda” to a file called case123.img using a block size of 4096 bytes, and it will fill the rest of a block with null symbols if it encounters an error:
dd if=/dev/hda of=case123.img bs=4k conv=noerror,sync
Note that this command does not generate a hash of the output file, which we need for verification. The solution is to simply use the sha1sum command separately.
FTK Imager FTK Imager is a free data preview and imaging tool developed by Access Data. Unlike the dd utility, this imager is a full-featured product that allows you to perform a forensically sound acquisition, verify it by generating MD5 and/or SHA-1 hashes, and even preview the files and folders in a read-only fashion. FTK Imager will also read registry keys from Windows and let you preview them and their values. It also supports compression, encryption, and multiple output formats, including EnCase Evidence File format (E01) and the raw format generated by dd (001).
Download
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.
Effective Threat Investigation for SOC Analysts by Yahia Mostafa;(6637)
Practical Memory Forensics by Svetlana Ostrovskaya & Oleg Skulkin(6359)
Machine Learning Security Principles by John Paul Mueller(6330)
Attacking and Exploiting Modern Web Applications by Simone Onofri & Donato Onofri(5998)
Operationalizing Threat Intelligence by Kyle Wilhoit & Joseph Opacki(5961)
Solidity Programming Essentials by Ritesh Modi(4070)
Microsoft 365 Security, Compliance, and Identity Administration by Peter Rising(3711)
Operationalizing Threat Intelligence by Joseph Opacki Kyle Wilhoit(3439)
Mastering Python for Networking and Security by José Manuel Ortega(3362)
Future Crimes by Marc Goodman(3351)
Mastering Azure Security by Mustafa Toroman and Tom Janetscheck(3338)
Blockchain Basics by Daniel Drescher(3308)
Learn Computer Forensics - Second Edition by William Oettinger(3198)
Incident Response with Threat Intelligence by Roberto Martínez(2929)
Mobile App Reverse Engineering by Abhinav Mishra(2889)
Mastering Bitcoin: Programming the Open Blockchain by Andreas M. Antonopoulos(2873)
The Code Book by Simon Singh(2837)
Building a Next-Gen SOC with IBM QRadar: Accelerate your security operations and detect cyber threats effectively by Ashish M Kothekar(2815)
From CIA to APT: An Introduction to Cyber Security by Edward G. Amoroso & Matthew E. Amoroso(2787)
