Mastering Python Forensics, by Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann
Simply attach your tool computer system or gadget to the internet hooking up. Get the modern innovation to make your downloading and install Mastering Python Forensics, By Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann completed. Even you do not wish to review, you could straight close the book soft data and also open Mastering Python Forensics, By Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann it later. You could likewise easily obtain guide almost everywhere, due to the fact that Mastering Python Forensics, By Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann it is in your device. Or when being in the workplace, this Mastering Python Forensics, By Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann is likewise recommended to read in your computer gadget.
Mastering Python Forensics, by Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann
Free PDF Ebook Online Mastering Python Forensics, by Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann
Master the art of digital forensics and analysis with Python
About This Book
- Learn to perform forensic analysis and investigations with the help of Python, and gain an advanced understanding of the various Python libraries and frameworks
- Analyze Python scripts to extract metadata and investigate forensic artifacts
- The writers, Dr. Michael Spreitzenbarth and Dr. Johann Uhrmann, have used their experience to craft this hands-on guide to using Python for forensic analysis and investigations
Who This Book Is For
If you are a network security professional or forensics analyst who wants to gain a deeper understanding of performing forensic analysis with Python, then this book is for you. Some Python experience would be helpful.
What You Will Learn
- Explore the forensic analysis of different platforms such as Windows, Android, and vSphere
- Semi-automatically reconstruct major parts of the system activity and time-line
- Leverage Python ctypes for protocol decoding
- Examine artifacts from mobile, Skype, and browsers
- Discover how to utilize Python to improve the focus of your analysis
- Investigate in volatile memory with the help of volatility on the Android and Linux platforms
In Detail
Digital forensic analysis is the process of examining and extracting data digitally and examining it. Python has the combination of power, expressiveness, and ease of use that makes it an essential complementary tool to the traditional, off-the-shelf digital forensic tools.
This book will teach you how to perform forensic analysis and investigations by exploring the capabilities of various Python libraries.
The book starts by explaining the building blocks of the Python programming language, especially ctypes in-depth, along with how to automate typical tasks in file system analysis, common correlation tasks to discover anomalies, as well as templates for investigations. Next, we'll show you cryptographic algorithms that can be used during forensic investigations to check for known files or to compare suspicious files with online services such as VirusTotal or Mobile-Sandbox.
Moving on, you'll learn how to sniff on the network, generate and analyze network flows, and perform log correlation with the help of Python scripts and tools. You'll get to know about the concepts of virtualization and how virtualization influences IT forensics, and you'll discover how to perform forensic analysis of a jailbroken/rooted mobile device that is based on iOS or Android.
Finally, the book teaches you how to analyze volatile memory and search for known malware samples based on YARA rules.
Style and approach
This easy-to-follow guide will demonstrate forensic analysis techniques by showing you how to solve real-word-scenarios step by step.
Mastering Python Forensics, by Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann - Amazon Sales Rank: #1389250 in Books
- Published on: 2015-10-30
- Released on: 2015-10-30
- Original language: English
- Number of items: 1
- Dimensions: 9.25" h x .44" w x 7.50" l, .75 pounds
- Binding: Paperback
- 192 pages
Mastering Python Forensics, by Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann About the Author
Dr. Michael Spreitzenbarth
Dr. Michael Spreitzenbarth holds a degree of doctor of engineering in IT security from the University of Erlangen-Nuremberg and is a CISSP as well as a GMOB. He has been an IT security consultant at a worldwide operating CERT for more than three years and has worked as a freelancer in the field of mobile phone forensics, malware analysis, and IT security consultancy for more than six years. Since the last four years, he has been giving talks and lectures in the fields of forensics and mobile security at various universities and in the private sector.
Dr. Johann Uhrmann
Dr. Johann Uhrmann holds a degree in computer science from the University of Applied Sciences Landshut and a doctor of engineering from the University of the German Federal Armed Forces. He has more than ten years of experience in software development, which includes working for start-ups, institutional research, and corporate environment. Johann has several years of experience in incident handling and IT governance, focusing on Linux and Cloud environments.
Where to Download Mastering Python Forensics, by Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann
Most helpful customer reviews
4 of 4 people found the following review helpful. Disappointing By Tim Crothers I was really looking forward to this title and put it on my short list to read as soon as it came out. Unfortunately it appears to have been released prematurely. This book would be more appropriately titled "An Introduction to Using Python for Forensics" and unfortunately falls far short of any Mastery. To be sure, there is a lot of of good gems in here if you aren't familiar with using Python to support digital investigations but the authors' writing style is so terse that you end up with nothing more than a highlight in most cases. Another key drawback is that there are critical topics missing. The most glaring of these is that there is no coverage of using Python to analyze Windows file systems. Inodes for Linux are covered but nothing on NTFS or FAT file systems for instance.There is definitely some useful information in here if you are just learning to leverage Python for forensics examinations so a worthwhile read if you are that. If you have used Python as part of investigations already then the price probably isn't worth the material.
0 of 0 people found the following review helpful. Covering several IT forensics topics, allowing reader to go to developing his/her own scripts By Yves Vandermeer I enjoyed to link the topics covered using fully python scripting oriented approach developed in this book.However, you already need to have experience in computer forensics and understand main concepts to be able to implement provided methods. Python learning curve is outstanding fast and most of the readers will be able to address common forensics, including mobile forensics cases by only applying provided scripts and referenced libraries.As for all python books, tutorials and available code, the reader will have to, when feeling confortable with provided code, adapt the code to his own needs. Now that The Sleuthkit provides python modules, and with help of the covered C-types, forensics practitioners will have a real added value toolset to solve ad-hoc challenges.
0 of 0 people found the following review helpful. The book starts by explaining the building blocks of the ... By ruben The book starts by explaining the building blocks of the Python programming language, especially ctypes in-depth, along with how to automate typical tasks in file system analysis, common correlation tasks to discover anomalies, as well as templates for investigations. Next, we’ll show you cryptographic algorithms that can be used during forensic investigations to check for known files or to compare suspicious files with online services such as VirusTotal or Mobile-Sandbox.I have seen this book very interesting, and never seens it before, with this title helprs to comprenhen the main thing this Python Forensics.We can develop many things with this kind of information that I can have with this book. in may area I can apply these all kind of topics in networking areas.Ruben.
See all 6 customer reviews...
Mastering Python Forensics, by Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann
Mastering Python Forensics, by Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann PDF
Mastering Python Forensics, by Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann iBooks
Mastering Python Forensics, by Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann ePub
Mastering Python Forensics, by Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann rtf
Mastering Python Forensics, by Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann AZW
Mastering Python Forensics, by Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann Kindle
Mastering Python Forensics, by Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann
Mastering Python Forensics, by Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann
Mastering Python Forensics, by Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann
Mastering Python Forensics, by Dr. Michael Spreitzenbarth, Dr. Johann Uhrmann
