Cybercrime Case Presentation is a "first look" excerpt from Brett Shavers' new Syngress book, Placing the Suspect Behind the Keyboard. Case presentation requires the skills of a good forensic examiner and great public speaker in order to convey enough information to an audience for the audience to place the suspect behind the keyboard. Using a variety of visual aids, demonstrative methods, and analogies, investigators can effectively create an environment where the audience fully understands complex technical information and activity in a chronological fashion, as if they observed the case as it happened.

Cybercrime Case Presentation: An Excerpt from Placing The Suspect Behind The Keyboard

Computers & Technology

Shavers, Brett

Programming

Syngress

Cybercrime Investigation Case Studies is a "first look" excerpt from Brett Shavers' new Syngress book, Placing the Suspect Behind the Keyboard. Case studies are an effective method of learning the methods and processes that were both successful and unsuccessful in real cases. Using a variety of case types, including civil and criminal cases, with different cybercrimes, a broad base of knowledge can be gained by comparing the cases against each other. The primary goal of reviewing successful cases involving suspects using technology to facilitate crimes is to be able to find and use the same methods in future cases. This "first look" teaches you how to place the suspect behind the keyboard using case studies.

Cybercrime Investigation Case Studies: An Excerpt from Placing the Suspect Behind the Keyboard

Politics & Social Sciences

Social Sciences

Investigative Case Management is a "first look" excerpted from Brett Shavers' new Syngress book, Placing the Suspect Behind the Keyboard. Investigative case management is more than just organizing your case files. It includes the analysis of all evidence collected through digital examinations, interviews, surveillance, and other data sources. In order to place a suspect behind any keyboard, supporting evidence needs to be collected and attributed to a person. This first look provides you with traditional and innovative methods of data analysis to identify and eliminate suspects through a combination of supporting methods of analysis.

Cybercrime Investigative Case Management: An Excerpt from Placing the Suspect Behind the Keyboard

The X-Ways Forensics Practitioner's Guide is more than a manual-it's a complete reference guide to the full use of one of the most powerful forensic applications available, software that is used by a wide array of law enforcement agencies and private forensic examiners on a daily basis. In the X-Ways Forensics Practitioner's Guide, the authors provide you with complete coverage of this powerful tool, walking you through configuration and X-Ways fundamentals, and then moving through case flow, creating and importing hash databases, digging into OS artifacts, and conducting searches. With X-Ways Forensics Practitioner's Guide, you will be able to use X-Ways Forensics to its fullest potential without any additional training. The book takes you from installation to the most advanced features of the software. Once you are familiar with the basic components of X-Ways, the authors demonstrate never-before-documented features using real life examples and information on how to present investigation results. The book culminates with chapters on reporting, triage and preview methods, as well as electronic discovery and cool X-Ways apps.

X-Ways Forensics Practitioner’s Guide

Zimmerman, Eric

Computer Science

Hiding Behind the Keyboard: Uncovering Covert Communication Methods with Forensic Analysis exposes the latest electronic covert communication techniques used by cybercriminals, along with the needed investigative methods for identifying them. The book shows how to use the Internet for legitimate covert communication, while giving investigators the information they need for detecting cybercriminals who attempt to hide their true identity. Intended for practitioners and investigators, the book offers concrete examples on how to communicate securely, serving as an ideal reference for those who truly need protection, as well as those who investigate cybercriminals.

Hiding Behind the Keyboard: Uncovering Covert Communication Methods with Forensic Analysis

Bair, John

Networking & Cloud Computing

"Beware the examiners who know X-Ways, for they likely know forensics." - Brett Shavers\nThe X-Ways Forensics Practitioner's Guide, SECOND EDITION is more than a manual-it's a complete reference guide to the full use of one of the most powerful forensic applications available, software that is used by a wide array of law enforcement agencies and private forensic examiners on a daily basis.In the X-Ways Forensics Practitioner's Guide/2E, the author and contributors provide you with complete coverage of this powerful tool, walking you through configuration and X-Ways fundamentals, and then moving through case flow, creating and importing hash databases, digging into OS artifacts, and conducting searches.\nWith X-Ways Forensics Practitioner's Guide/2E, you will be able to exploit X-Ways Forensics to its fullest potential. The book takes you from installation to the most advanced features of the software. Once you are familiar with the basic components of X-Ways, demonstrations of never-before-documented features using real life examples and information on how to present investigation results. The book culminates with chapters on reporting, triage and preview methods, as well as electronic discovery and cool X-Ways apps.\nHere's What You'll Learn From This Amazing Book for Forensic Practitioners: Installation and configuration to yourpreferences and needs. Case Management - Creating cases, managing cases, auditing your work, timelines, events, creating and adding evidence, and more. Imaging in the ways that only X-Ways can do! Cleansed images, Skeleton images, Snippet images, Reverse images, Memory images, Container files, and whole media forensic images. Navigating the interface with descriptive details on the checkboxes, the tri-state checkboxes, context menus, security options, and the mode buttons. Maneuvering around in the data and becoming not just comfortable, but confident in using all the features of X-Ways Forensics. Reporting in X-Ways Forensics has more options than you know what to do with in creating a report. With guidance, your XWF report will be awesome and easily display your evidence exactly as you want it. Pushing the limits of the most powerful feature of XWF, the Refined Volume Snapshot. All the options, tips & tricks on which to use for specifically targeted evidence and data. Avoiding user errors and ensuring that the evidence you need is effectively targeted and refined. Setting up and using XWF Internal Hash Database to compute hash values, compare hashes, DeNIST files, create your own hash sets, and find evidence, including FuZZy hashes! Plus Advanced XWF features! SEARCHING in X-Ways Forensics is unparalleled. If the only feature of XWF was its searching ability, it would still be a great value and tool. Yet, without knowing how to search, users are only using a fraction of the search capability, such as index searches, logical searches, physical searches, and regular expression (GREP) searches. BONUS MATERIAL! Case workflow ideas from a dozen XWF users! Third-party apps and X-Tensions! Keyboard shortcuts, XWF references and resources, and an entire appendix on the infamous XWF checkboxes and tri-state checkboxes!The XWF Practitioner's Guide, Second Edition is visual, descriptive, and authoritative.

X-Ways Forensics Practitioner's Guide

DFIR Training

Placing the Suspect Behind the Keyboard is the definitive book on conducting a complete investigation of a cybercrime using digital forensics techniques as well as physical investigative procedures. This book merges a digital analysis examiner's work with the work of a case investigator in order to build a solid case to identify and prosecute cybercriminals. Brett Shavers links traditional investigative techniques with high tech crime analysis in a manner that not only determines elements of crimes, but also places the suspect at the keyboard. This book is a first in combining investigative strategies of digital forensics analysis processes alongside physical investigative techniques in which the reader will gain a holistic approach to their current and future cybercrime investigations.

Placing the Suspect Behind the Keyboard: Using Digital Forensics and Investigative Techniques to Identify Cybercrime Suspects

Written for users of X-Ways Forensics, the Ultimate DFIR Cheats! X-Ways Forensics gives dozens of tips, tricks, cheats, and methods of maximizing X-Ways Forensics to process at the fastest speed possible, be as customized as the user desires, and full of itemized details of the infamous 3-state check boxes and speed settings to process evidence.

Ultimate DFIR Cheats! X-Ways Forensics

Security & Encryption

CreateSpace Independent Publishing Platform

All you need to know about the history, building, customization, and use of the windows Forensic Environment (WinFE). WinFE is a forensically sound version of winpe, a bootable operating system used by virtually any law enforcement agency that conducts forensic examinations.Learn how you can build a WinFE and the innovative uses for your digital forensics casework.From its inception by Troy Larson in 2008, through the development of WinFE through more advanced (and simpler) builds, this guide goes through every phase of WinFE's life cycle to the present.

Ultimate DFIR Cheats! Windows Forensic Environment

Independently published

SQLite is a self-contained SQL database engine that is used on every smartphone (including all iOS and Android devices) and most computers (including all Macs and Windows 10 machines). Each computer or phone using SQLite often has hundreds of SQLite databases and it is estimated that there are over one trillion SQLite databases in active use. Given the above, the importance of examining all of the data held in these databases in an investigation is paramount, and of course this includes examining deleted data whenever possible.In this book we cover the format of the SQLite database, and associated journal and Write-Ahead Logs (WAL) in great detail. We show how records are encoded, how to decode them manually and how to decode records that are partially overwritten. We also describe how the workings of SQLite, and in particular the journal and WAL, can be used to ascertain what has happened in a manner that cannot be determined from the data alone. We cover basic SQL queries and how they can be used to create a custom report that includes data from different tables, and we show how we can use SQL queries to test hypothesises about the relationships of data in different tables.This book is aimed mainly at forensic practitioners, and it is assumed that the reader has some basic knowledge of computer forensics; it will also be of interest to computer professionals in general particularly those who have an interest in the SQLite file format.

SQLite Forensics: (color edition)

Sanderson, Paul

Mahalik, Heather

See the best price to sell, buy, or rent books by Shavers, Brett. BookScouter helps to compare book prices from 25+ online bookstores and 30+ buyback vendors with a single search.

Books by Shavers, Brett