Python Forensics: A Workbench for Inventing and Sharing Digital Forensic Technology - Softcover

Hosmer, Chet

Softcover

ISBN 10: 0124186769 ISBN 13: 9780124186767

Publisher: Syngress, 2014

Synopsis

Python Forensics provides many never-before-published proven forensic modules, libraries, and solutions that can be used right out of the box. In addition, detailed instruction and documentation provided with the code samples will allow even novice Python programmers to add their own unique twists or use the models presented to build new solutions.

Rapid development of new cybercrime investigation tools is an essential ingredient in virtually every case and environment. Whether you are performing post-mortem investigation, executing live triage, extracting evidence from mobile devices or cloud services, or you are collecting and processing evidence from a network, Python forensic implementations can fill in the gaps.

Drawing upon years of practical experience and using numerous examples and illustrative code samples, author Chet Hosmer discusses how to:

• Develop new forensic solutions independent of large vendor software release schedules
• Participate in an open-source workbench that facilitates direct involvement in the design and implementation of new methods that augment or replace existing tools
• Advance your career by creating new solutions along with the construction of cutting-edge automation solutions to solve old problems

• Provides hands-on tools, code samples, and detailed instruction and documentation that can be put to use immediately
• Discusses how to create a Python forensics workbench
• Covers effective forensic searching and indexing using Python
• Shows how to use Python to examine mobile device operating systems: iOS, Android, and Windows 8
• Presents complete coverage of how to use Python scripts for network investigation

About this title

About the Author:

Chet Hosmer is the Founder of Python Forensics, Inc. a non-profit organization focused on the collaborative development of open-source investigative technologies using the Python programming language. Chet serves as a visiting professor at Utica College in the Cybersecurity Graduate program where his research and teaching focus on advanced steganography/data hiding methods and related defenses. He is also an Adjunct Faculty member at Champlain College in the Masters of Science in Digital Forensic Science Program where he is researching and working with graduate students to advance the application Python to solve hard problems facing digital investigators.

Chet makes numerous appearances each year to discuss emerging cyber threats including National Public Radio's Kojo Nnamdi show, ABC's Primetime Thursday, NHK Japan and ABC News Australia. He is also a frequent contributor to technical and news stories relating to cyber security and forensics and has been interviewed and quoted by IEEE, The New York Times, The Washington Post, Government Computer News, Salon.com, DFI News and Wired Magazine.

He is the author of three recent Elsevier/Syngress Books: Python Passive Network Mapping: ISBN-13: 978-0128027219, Python Forensics: ISBN-13: 978-0124186767 and Data Hiding which is co/authored with Mike Raggo: ISBN-13: 978-1597497435. Chet delivers keynote and plenary talks on various cyber security related topics around the world each year.

Review:

"Covering a panoply of techniques from search to network forensics, reading this book will expand the reader’s understanding of both forensics and the Python libraries." --Computing Reviews, December 2014

"Overall, the book is well laid out. The first few chapters cover some important forensic challenges. The code is easy to follow and well commented." --Help Net Security, December 2014

About this edition

• Publisher: Syngress
• Publication date: 2014
• ISBN 10: 0124186769
• ISBN 13: 9780124186767
• Binding: Paperback
• Edition number: 1
• Number of pages: 352