Centro de Documentação da PJ
Monografia
 CD262 |
Incident response & computer forensics [Documento electrónico] / Chris Prosise, Kevin Mandia.- 2nd ed.- New York : McGraw-Hill, 2003.- 1 CD-ROM ; 12 cm
Ficheiro de 8,63 MB em formato PDF (546 p.).
ISBN 0-07-222696-X
INFORMÁTICA FORENSE, PIRATARIA INFORMÁTICA, RECOLHA DA PROVA
Part I. Introduction. 1 Real-World Incidents. 2. Introduction to the Incident Response Process. 3. Preparing for Incident Response. 4. After Detection of an Incident. Part II. Data Collection. 5. Live Data Collection from Windows Systems. 6. Live Data Collection from Unix Systems. 7. Forensic Duplication. 8. Collecting Network-based Evidence. 9. Evidence Handling. Part III. Data Analysis. 10. Computer System Storage Fundamentals. 11. Data Analysis Techniques. 12. Investigating Windows Systems. 13. Investigating Unix Systems. 14. Analyzing Network Traffic. 15. Investigating Hacker Tools. 16. Investigating Routers. 17. Writing Computer Forensic Reports. Part IV. Appendixes. A Answers to Questions. B. Incident Response Forms. Index.