• Complain

Uhrmann Johann - Mastering Python forensics : master the art of digital forensics and analysis with Python

Here you can read online Uhrmann Johann - Mastering Python forensics : master the art of digital forensics and analysis with Python full text of the book (entire story) in english for free. Download pdf and epub, get meaning, cover and reviews about this ebook. year: 2015, publisher: Packt Publishing - ebooks Account, genre: Computer. Description of the work, (preface) as well as reviews are available. Best literature library LitArk.com created for fans of good reading and offers a wide selection of genres:

Romance novel Science fiction Adventure Detective Science History Home and family Prose Art Politics Computer Non-fiction Religion Business Children Humor

Choose a favorite category and find really read worthwhile books. Enjoy immersion in the world of imagination, feel the emotions of the characters or learn something new for yourself, make an fascinating discovery.

Uhrmann Johann Mastering Python forensics : master the art of digital forensics and analysis with Python
  • Book:
    Mastering Python forensics : master the art of digital forensics and analysis with Python
  • Author:
  • Publisher:
    Packt Publishing - ebooks Account
  • Genre:
  • Year:
    2015
  • Rating:
    4 / 5
  • Favourites:
    Add to favourites
  • Your mark:
    • 80
    • 1
    • 2
    • 3
    • 4
    • 5

Mastering Python forensics : master the art of digital forensics and analysis with Python: summary, description and annotation

We offer to read an annotation, description, summary or preface (depends on what the author of the book "Mastering Python forensics : master the art of digital forensics and analysis with Python" wrote himself). If you haven't found the necessary information about the book — write in the comments, we will try to find it.

Master the art of digital forensics and analysis with Python

About This Book
  • Learn to perform forensic analysis and investigations with the help of Python, and gain an advanced understanding of the various Python libraries and frameworks
  • Analyze Python scripts to extract metadata and investigate forensic artifacts
  • The writers, Dr. Michael Spreitzenbarth and Dr. Johann Uhrmann, have used their experience to craft this hands-on guide to using Python for forensic analysis and investigations
Who This Book Is For

If you are a network security professional or forensics analyst who wants to gain a deeper understanding of performing forensic analysis with Python, then this book is for you. Some Python experience would be helpful.

What You Will Learn
  • Explore the forensic analysis of different platforms such as Windows, Android, and vSphere
  • Semi-automatically reconstruct major parts of the system activity and time-line
  • Leverage Python ctypes for protocol decoding
  • Examine artifacts from mobile, Skype, and browsers
  • Discover how to utilize Python to improve the focus of your analysis
  • Investigate in volatile memory with the help of volatility on the Android and Linux platforms
In Detail

Digital forensic analysis is the process of examining and extracting data digitally and examining it. Python has the combination of power, expressiveness, and ease of use that makes it an essential complementary tool to the traditional, off-the-shelf digital forensic tools.

This book will teach you how to perform forensic analysis and investigations by exploring the capabilities of various Python libraries.

The book starts by explaining the building blocks of the Python programming language, especially ctypes in-depth, along with how to automate typical tasks in file system analysis, common correlation tasks to discover anomalies, as well as templates for investigations. Next, well show you cryptographic algorithms that can be used during forensic investigations to check for known files or to compare suspicious files with online services such as VirusTotal or Mobile-Sandbox.

Moving on, youll learn how to sniff on the network, generate and analyze network flows, and perform log correlation with the help of Python scripts and tools. Youll get to know about the concepts of virtualization and how virtualization influences IT forensics, and youll discover how to perform forensic analysis of a jailbroken/rooted mobile device that is based on iOS or Android.

Finally, the book teaches you how to analyze volatile memory and search for known malware samples based on YARA rules.

Style and approach

This easy-to-follow guide will demonstrate forensic analysis techniques by showing you how to solve real-word-scenarios step by step.

Uhrmann Johann: author's other books


Who wrote Mastering Python forensics : master the art of digital forensics and analysis with Python? Find out the surname, the name of the author of the book and a list of all author's works by series.

Mastering Python forensics : master the art of digital forensics and analysis with Python — read online for free the complete book (whole text) full work

Below is the text of the book, divided by pages. System saving the place of the last page read, allows you to conveniently read the book "Mastering Python forensics : master the art of digital forensics and analysis with Python" online for free, without having to search again every time where you left off. Put a bookmark, and you can go to the page where you finished reading at any time.

Light

Font size:

Reset

Interval:

Bookmark:

Make
Mastering Python Forensics

Mastering Python Forensics

Copyright 2015 Packt Publishing

All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the authors, nor Packt Publishing, and its dealers and distributors will be held liable for any damages caused or alleged to be caused directly or indirectly by this book.

Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

First published: October 2015

Production reference: 1261015

Published by Packt Publishing Ltd.

Livery Place

35 Livery Street

Birmingham B3 2PB, UK.

ISBN 978-1-78398-804-4

www.packtpub.com

Credits

Authors

Dr. Michael Spreitzenbarth

Dr. Johann Uhrmann

Reviewers

Richard Marsden

Puneet Narula

Yves Vandermeer

Commissioning Editor

Kartikey Pandey

Acquisition Editor

Sonali Vernekar

Content Development Editor

Shweta Pant

Technical Editor

Pranil Pathare

Copy Editor

Vibha Shukla

Project Coordinator

Shipra Chawhan

Proofreader

Safis Editing

Indexer

Mariammal Chettiyar

Production Coordinator

Arvindkumar Gupta

Cover Work

Arvindkumar Gupta

About the Authors

Dr. Michael Spreitzenbarth holds a degree of doctor of engineering in IT security from the University of Erlangen-Nuremberg and is a CISSP as well as a GMOB. He has been an IT security consultant at a worldwide operating CERT for more than three years and has worked as a freelancer in the field of mobile phone forensics, malware analysis, and IT security consultancy for more than six years. Since the last four years, he has been giving talks and lectures in the fields of forensics and mobile security at various universities and in the private sector.

I would like to thank everyone who has encouraged me while writing this book, especially my wife for her great support. I would also like to thank all the authors of the used open source tools without your help, this book wouldn't have been possible.

Dr. Johann Uhrmann holds a degree in computer science from the University of Applied Sciences Landshut and a doctor of engineering from the University of the German Federal Armed Forces. He has more than ten years of experience in software development, which includes working for start-ups, institutional research, and corporate environment. Johann has several years of experience in incident handling and IT governance, focusing on Linux and Cloud environments.

First of all, I would like to thank my wife, Daniela, for her moral support and willingness to give up on some family time while I was writing. I also would like to thank my coauthor and colleague, Dr. Michael Spreitzenbarth, for talking me into writing this book and handling a great deal of the organizational overhead of such a project. Furthermore, the great people working on all the open source software projects that we used and mentioned in this book deserve credit. You are the guys who keep the IT world spinning.

About the Reviewers

Richard Marsden has over twenty years of professional experience in software development. After starting in the fields of geophysics and oil exploration, he has spent the last twelve years running the Winwaed Software Technology LLC, an independent software vendor. Winwaed specializes in geospatial tools and applications, which include web applications, and operates the http://www.mapping-tools.com website for tools and add-ins for geospatial products, such as Caliper's Maptitude and Microsoft's MapPoint.

Richard was also a technical reviewer for Python Geospatial Development , and Python Geospatial Analysis Essentials , both written by Erik Westra , Packt Publishing .

Puneet Narula is currently working as PPC Data Analyst with Hostelworld.com Ltd (http://www.hostelworld.com/), Dublin, Ireland, where he analyzes massive clickstream data from direct and affiliate sources and provides insight to the digital marketing team. He uses RapidMiner, R, and Python for the exploratory and predictive analysis. His areas of expertise are programming in Python and R, machine learning, data analysis and Tableau.

He started his career in banking and finance and then moved to the ever growing domain of data and analytics.

He earned MSc in computing (data analytics) from Dublin Institute of Technology, Dublin, Ireland. He has reviewed the books: Python Data Analysis , by Ivan Idris , Packt Publishing and Python Geospatial Analysis Essentials , by Erik Westra , Packt Publishing .

Yves Vandermeer is a police officer working for the Belgian Federal Police. He has been involved in major investigations since 1997, where he contributed to recovering digital evidence. Owning a MSc in computer forensics, Yves is also a trainer on several topics such as filesystems and network forensics for several law enforcement agencies.

Chairing the European Cybercrime Training and Education Group, E.C.T.E.G., since 2013, Yves supports the creation of training materials that are focused on the understanding of the concepts applied in practical exercises.

Using his experience, he developed forensic software tools for law enforcement and contributed to several advisory groups related to IT crime and IT forensics.

www.PacktPub.com
Support files, eBooks, discount offers, and more

For support files and downloads related to your book, please visit www.PacktPub.com.

Did you know that Packt offers eBook versions of every book published, with PDF and ePub files available? You can upgrade to the eBook version at > for more details.

At www.PacktPub.com, you can also read a collection of free technical articles, sign up for a range of free newsletters and receive exclusive discounts and offers on Packt books and eBooks.

httpswww2packtpubcombookssubscriptionpacktlib Do you need instant - photo 1

https://www2.packtpub.com/books/subscription/packtlib

Do you need instant solutions to your IT questions? PacktLib is Packt's online digital book library. Here, you can search, access, and read Packt's entire library of books.

Why subscribe?
  • Fully searchable across every book published by Packt
  • Copy and paste, print, and bookmark content
  • On demand and accessible via a web browser
Free access for Packt account holders

If you have an account with Packt at www.PacktPub.com, you can use this to access PacktLib today and view 9 entirely free books. Simply use your login credentials for immediate access.

Next page
Light

Font size:

Reset

Interval:

Bookmark:

Make

Similar books «Mastering Python forensics : master the art of digital forensics and analysis with Python»

Look at similar books to Mastering Python forensics : master the art of digital forensics and analysis with Python. We have selected literature similar in name and meaning in the hope of providing readers with more options to find new, interesting, not yet read works.


Reviews about «Mastering Python forensics : master the art of digital forensics and analysis with Python»

Discussion, reviews of the book Mastering Python forensics : master the art of digital forensics and analysis with Python and just readers' own opinions. Leave your comments, write what you think about the work, its meaning or the main characters. Specify what exactly you liked and what you didn't like, and why you think so.