000 03863cam a22003491i 4500
003 SA-RiNAUS
005 20220608135821.0
008 160928s2017 xxka f bi 000 0 eng
020 _a978-1-78398-746-7
040 _aSA-RiNAUS
_bara
_cSA-RiNAUS
_erda
082 _221
_a364.168
_bM P L
100 1 _a Preston, Miller
_eauthor.
_932406
245 0 0 _aLearning Python for Forensics :
_b Leverage the power of Python in forensic investigations /
_cby Preston Miller, Chapin Bryce.
250 _a1st edition.
264 1 _aBirmingham :
_b Packt Publishing,
_c2017
_m[1438]
300 _a ‎ 391 pages :
_b Illustrations ;
_c24 cm
500 _aIncludes index.
504 _aIncludes bibliographical references.
505 0 _a Contents : Working with System/File Info-A Deep Dive into Mobile Forensics-Extracting-Embedded Metadata-Exploring Networking and Indicators of Compromise-Reading Emails and-Taking Names-Forensic Evidence-Log Based Artifacts-Exploring Windows Forensic Artifact-Exploring Windows Forensic Artifact. Creating Artifact Report.
520 3 _aTechnology plays an increasingly large role in our daily lives and shows no sign of stopping. Now, more than ever, it is paramount that an investigator develops programming expertise to deal with increasingly large datasets. By leveraging the Python recipes explored throughout this book, we make the complex simple, quickly extracting relevant information from large datasets. You will explore, develop, and deploy Python code and libraries to provide meaningful results that can be immediately applied to your investigations. Throughout the Python Digital Forensics Cookbook, recipes include topics such as working with forensic evidence containers, parsing mobile and desktop operating system artifacts, extracting embedded metadata from documents and executables, and identifying indicators of compromise. You will also learn to integrate scripts with Application Program Interfaces (APIs) such as VirusTotal and PassiveTotal, and tools such as Axiom, Cellebrite, and EnCase. By the end of the book, you will have a sound understanding of Python and how you can use it to process artifacts in your investigations. The second edition of Learning Python for Forensics will illustrate how to develop Python scripts using an iterative design. Further, it demonstrates how to leverage the various built-in and community-sourced forensics scripts and libraries available for Python today. This book will help strengthen your analysis skills and efficiency as you creatively solve real-world problems through instruction-based tutorials. By the end of this book, you will build a collection of Python scripts capable of investigating an array of forensic artifacts and master the skills of extracting metadata and parsing complex data structures into actionable reports. Most importantly, you will have developed a foundation upon which to build as you continue to learn Python and enhance your efficacy as an investigator.
521 _aIf you are a forensics student, hobbyist, or professional seeking to increase your understanding in forensics through the use of a programming language, then Learning Python for Forensics is for you. You are not required to have previous experience in programming to learn and master the content within this book. This material, created by forensic professionals, was written with a unique perspective and understanding for examiners who wish to learn programming.
650 0 _aCriminal investigation.
650 0 _aAlgorithms
_932402
650 0 _aComputer software.
_932403
650 0 _a Python (Computer program language)
_932407
650 0 _aForensic sciences.
650 0 _aComputer crimes
_xInvestigation.
650 0 _aComputer security.
700 1 _a Wayne, Jason
_eeditor.
_932408
942 _2ddc
_cBK
999 _c33064
_d33063