Spreitzenbarth Michael - Mastering Python forensics: master the art of digital forensics and analysis with Python

Dr. Michael Spreitzenbarth holds a degree of doctor of engineering in IT security from the University of Erlangen-Nuremberg and is a CISSP as well as a GMOB. He has been an IT security consultant at a worldwide operating CERT for more than three years and has worked as a freelancer in the field of mobile phone forensics, malware analysis, and IT security consultancy for more than six years. Since the last four years, he has been giving talks and lectures in the fields of forensics and mobile security at various universities and in the private sector.

I would like to thank everyone who has encouraged me while writing this book, especially my wife for her great support. I would also like to thank all the authors of the used open source tools without your help, this book wouldn't have been possible.

Dr. Johann Uhrmann holds a degree in computer science from the University of Applied Sciences Landshut and a doctor of engineering from the University of the German Federal Armed Forces. He has more than ten years of experience in software development, which includes working for start-ups, institutional research, and corporate environment. Johann has several years of experience in incident handling and IT governance, focusing on Linux and Cloud environments.

First of all, I would like to thank my wife, Daniela, for her moral support and willingness to give up on some family time while I was writing. I also would like to thank my coauthor and colleague, Dr. Michael Spreitzenbarth, for talking me into writing this book and handling a great deal of the organizational overhead of such a project. Furthermore, the great people working on all the open source software projects that we used and mentioned in this book deserve credit. You are the guys who keep the IT world spinning.

Richard Marsden has over twenty years of professional experience in software development. After starting in the fields of geophysics and oil exploration, he has spent the last twelve years running the Winwaed Software Technology LLC, an independent software vendor. Winwaed specializes in geospatial tools and applications, which include web applications, and operates the http://www.mapping-tools.com website for tools and add-ins for geospatial products, such as Caliper's Maptitude and Microsoft's MapPoint.

Richard was also a technical reviewer for Python Geospatial Development , and Python Geospatial Analysis Essentials , both written by Erik Westra , Packt Publishing .

Puneet Narula is currently working as PPC Data Analyst with Hostelworld.com Ltd (http://www.hostelworld.com/), Dublin, Ireland, where he analyzes massive clickstream data from direct and affiliate sources and provides insight to the digital marketing team. He uses RapidMiner, R, and Python for the exploratory and predictive analysis. His areas of expertise are programming in Python and R, machine learning, data analysis and Tableau.

He started his career in banking and finance and then moved to the ever growing domain of data and analytics.

He earned MSc in computing (data analytics) from Dublin Institute of Technology, Dublin, Ireland. He has reviewed the books: Python Data Analysis , by Ivan Idris , Packt Publishing and Python Geospatial Analysis Essentials , by Erik Westra , Packt Publishing .

Yves Vandermeer is a police officer working for the Belgian Federal Police. He has been involved in major investigations since 1997, where he contributed to recovering digital evidence. Owning a MSc in computer forensics, Yves is also a trainer on several topics such as filesystems and network forensics for several law enforcement agencies.

Chairing the European Cybercrime Training and Education Group, E.C.T.E.G., since 2013, Yves supports the creation of training materials that are focused on the understanding of the concepts applied in practical exercises.

Using his experience, he developed forensic software tools for law enforcement and contributed to several advisory groups related to IT crime and IT forensics.

www.PacktPub.com

Support files, eBooks, discount offers, and more

For support files and downloads related to your book, please visit www.PacktPub.com.

Did you know that Packt offers eBook versions of every book published, with PDF and ePub files available? You can upgrade to the eBook version at > for more details.

At www.PacktPub.com, you can also read a collection of free technical articles, sign up for a range of free newsletters and receive exclusive discounts and offers on Packt books and eBooks.

https://www2.packtpub.com/books/subscription/packtlib

Do you need instant solutions to your IT questions? PacktLib is Packt's online digital book library. Here, you can search, access, and read Packt's entire library of books.

Why subscribe?

• Fully searchable across every book published by Packt
• Copy and paste, print, and bookmark content
• On demand and accessible via a web browser

Free access for Packt account holders

If you have an account with Packt at www.PacktPub.com, you can use this to access PacktLib today and view 9 entirely free books. Simply use your login credentials for immediate access.