▄
▄
▄▄▄ ▐█▄
▄▄█████▓██▓▄▄▄ ▄███▌
─■■── ▄████▀▀▀ ▀▀███▓██ ─────────────────── █████▌■───────────────────────■─
░ ░ ▄████▀ ░░░░░░░░ ▀███▓██ ░░░░░░░░░░░░░░░░ █▓████ ░░░░░░ ▄▄▓██▄░░░░░░░░ ░░░░
▀ ▐██▓█ ████▓█ █▓████▌ ▄▀████▓██
▀ ███▓ ████▓█ ▐▓█████ ▄ ████▓██
████▌ ▄▄▀ ▐████▓▌ ▄▄▄ █▓████ ▐██▓▒▓▓▌
▐█▀▄▄██▌ ▄▌████▓█▐██████▓▄▄ ██▓██▌ █▓▒▒▒▓▌ x!FEAR
▒ ▒▒▒▒▐▌███▓█ ▒▒▒▒▒ ▄▀▀▌████▓█ ▀▀▀█████▓█▄ █▓██▌▒▒▒▒▒▒▒▒▒▒▒▐██▓░░▒█ ▒▒▒▒▒▒▒ ▒
▄██▓▓█ ▐███▓█▌ ▀████▓█▄▀███ ▐██▓▒░▒█
░░░░░ ▐██▓▒▓█▌░░░░░░░ ███▓██ ▄░░░░░ ▀███▓██ ▓██░░░░░░░░░ █▌██▒▒▒▓▌ ░ ░░░░░░
▐█▓▒░▒██ ███▓██ █▀ ████▓█ ▓██▄ ▄██ ▐█▓▒▓▓▌
██▓▒▓▌▓█▄ ▄▄█████▀▄█ ████▓▌ ▀▀███▄▄███▀ ▐██▓▓█
▀ ███▓██ ▀▀██▓███▓▀▀▄█▓▌ ▐████▓ ▀▀▀▀ █▓█▀
░░░░ ▄░▐█▓███▀ ░ ▀▀▀ ▀██▓▓▌░ ░░░░░░░░░░░ ███▓█ ░░░░░░░░░░░░░ ██ ░░░░░░░░░ ░
░░░░ ▀███▀▀ ░░░░░░░░░░▐█▓▒▓█ ░░░░░░░░░░░░░███▓█ ░░░░ ░░░░░░░░ █ ░░░░░░░░░
────────────────■───── █▓▒░▒█▌ ────────── ▐███▓▌────────────── ▌ ──────■──────
▒▒▒ ▒ ▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒ ██▓▒▓▌▓▄ ▒▒▒▒▒▒▒▒▒ ███▓█ ▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒▒
────────────────── ■▀ ▄███▓██ ▓█▄ ──────▄███▓█ ─────■■─────────────────────■─
▀███▓█▄ ▀███▄▄▄█████▓▀
▀▀ ▀▀███▓▀▀▀
┌────────────────────────────────────────────────────────────────────────────┐
│■■ » RELEASE iNFORMATiON « ■■│
└─┬────────────────────────────────────────────────────────────────────────┬─┘
│░│ TiTLE : File System Forensic Analysis │░│
│░├────────────────────────────────────────────────────────────────────────┤░│
│░│ AUTHOR : Brian Carrier │░│
│░├────────────────────────────────────────────────────────────────────────┤░│
│░│ PUBLISHER : Addison-Wesley Professional │░│
│░├────────────────────────────────────┬───────────────────────────────────┤░│
│░│ iSBN : 0321268172 │ MAKER : Team DDU │░│
│░├────────────────────────────────────┼───────────────────────────────────┤░│
│░│ PAGES : 600 Pages │ PACKAGER : Team DDU │░│
│░├────────────────────────────────────┼───────────────────────────────────┤░│
│░│ EDiTiON : March 17, 2005 │ SUPPLiER : Team DDU │░│
│░├────────────────────────────────────┼───────────────────────────────────┤░│
│░│ LANGUAGE : ENGLISH │ FORMAT : CHM │░│
│░├────────────────────────────────────┼───────────────────────────────────┤░│
│░│ RLS DATE : 05/08/05 │ SiZE : 3.82 MB │░│
┌─┴────────────────────────────────────┴───────────────────────────────────┴─┐
│■■ » RELEASE NOTES « ■■│
└─┬────────────────────────────────────────────────────────────────────────┬─┘
│░│ │░│
│░│ [Product Information] │░│
│░│ │░│
│░│ The Definitive Guide to File System Analysis: Key Concepts and │░│
│░│ Hands-on Techniques │░│
│░│ Most digital evidence is stored within the computer's file │░│
│░│ system, but understanding how file systems work is one of the most │░│
│░│ technically challenging concepts for a digital investigator because │░│
│░│ there exists little documentation. Now, security expert Brian │░│
│░│ Carrier has written the definitive reference for everyone who wants │░│
│░│ to understand and be able to testify about how file system analysis │░│
│░│ is performed. │░│
│░│ Carrier begins with an overview of investigation and computer │░│
│░│ foundations and then gives an authoritative, comprehensive, and │░│
│░│ illustrated overview of contemporary volume and file systems: │░│
│░│ Crucial information for discovering hidden evidence, recovering │░│
│░│ deleted data, and validating your tools. Along the way, he │░│
│░│ describes data structures, analyzes example disk images, provides │░│
│░│ advanced investigation scenarios, and uses today's most │░│
│░│ valuable open source file system analysis tools--including tools he │░│
│░│ personally developed. Coverage includes │░│
│░│ -- │░│
│░│ Preserving the digital crime scene and duplicating hard disks for │░│
│░│ "dead analysis" │░│
│░│ -- │░│
│░│ Identifying hidden data on a disk's Host Protected Area (HPA) │░│
│░│ -- │░│
│░│ Reading source data: Direct versus BIOS access, dead versus live │░│
│░│ acquisition, error handling, and more │░│
│░│ -- │░│
│░│ Analyzing DOS, Apple, and GPT partitions; BSD disk labels; and Sun │░│
│░│ Volume Table of Contents using key concepts, data structures, and │░│
│░│ specific techniques │░│
│░│ -- │░│
│░│ Analyzing the contents of multiple disk volumes, such as RAID and │░│
│░│ disk spanning │░│
│░│ -- │░│
│░│ Analyzing FAT, NTFS, Ext2, Ext3, UFS1, and UFS2 file systems using │░│
│░│ key concepts, data structures, and specific techniques │░│
│░│ -- │░│
│░│ Finding evidence: File metadata, recovery of deleted files, data │░│
│░│ hiding locations, and more │░│
│░│ -- │░│
│░│ Using The Sleuth Kit (TSK), Autopsy Forensic Browser, and related │░│
│░│ open source tools │░│
│░│ When it comes to file system analysis, no other book offers this │░│
│░│ much detail or expertise. Whether you're a digital forensics │░│
│░│ specialist, incident response team member, law enforcement officer, │░│
│░│ corporate security specialist, or auditor, this book will become an │░│
│░│ indispensable resource for forensic investigations, no matter what │░│
│░│ analysis tools you use. │░│
│░│ Brian Carrier has authored several leading computer forensic tools, │░│
│░│ including The Sleuth Kit (formerly The @stake Sleuth Kit) and the │░│
│░│ Autopsy Forensic Browser. He has authored several peer-reviewed │░│
│░│ conference and journal papers and has created publicly available │░│
│░│ testing images for forensic tools. Currently pursuing a Ph.D. in │░│
│░│ Computer Science and Digital Forensics at Purdue University, he is │░│
│░│ also a research assistant at the Center for Education and Research │░│
│░│ in Information Assurance and Security (CERIAS) there. He formerly │░│
│░│ served as a research scientist at @stake and as the lead for the │░│
│░│ @stake Response Team and Digital Forensic Labs. Carrier has taught │░│
│░│ forensics, incident response, and file systems at SANS, FIRST, the │░│
│░│ @stake Academy, and SEARCH. │░│
│░│ Brian Carrier's http://www.digital-evidence.org contains book │░│
│░│ updates and up-to-date URLs from the book's references. │░│
│░│ │░│
│░│ © Copyright Pearson Education. All rights reserved. │░│
│░│ │░│
│░│ │░│
│░│ [Install Information] │░│
│░│ │░│
│░│ Unpack it ! │░│
│░│ │░│
│░│ [For more information] │░│
│░│ │░│
│░│ http://www.amazon.com/exec/obidos/tg/detail/-/0321268172/ │░│
│░│ │░│
┌─┴────────────────────────────────────────────────────────────────────────┴─┐
│■■ » CONTACT iNFORMATiON « ■■│
└─┬────────────────────────────────────────────────────────────────────────┬─┘
│░│ │░│
│░│ Nothing but suppliers ATM! │░│
│░│ │░│
│░│ If you wish to contact us, you may email us at: │░│
│░│ Email: TeamDDU[at]hotmail[dot]com │░│
│░│ │░│
┌─┴────────────────────────────────────────────────────────────────────────┴─┐
│■■ TEAM DDU ( Day Day UP ) 2004 x!FEAR ■■│
└────────────────────────────────────────────────────────────────────────────┘
