ebooks and download videos Search All  Title  Author 
Home / Nonfiction / Computers / Networking / Security

Mastering Python Forensics

| £26.66 | €29.98 | Ca$43.24 | Au$42.68
by Dr. Michael Spreitzenbarth & Dr. Johann Uhrmann
What is this?DRM-EPUB | by download   add to wish list
Mastering Python Forensics by Dr. Michael Spreitzenbarth & Dr. Johann Uhrmann

About This Book

  • Learn to perform forensic analysis and investigations with the help of Python, and gain an advanced understanding of the various Python libraries and frameworks
  • Analyze Python scripts to extract metadata and investigate forensic artifacts
  • The writers, Dr. Michael Spreitzenbarth and Dr. Johann Uhrmann, have used their experience to craft this hands-on guide to using Python for forensic analysis and investigations

Who This Book Is For

If you are a network security professional or forensics analyst who wants to gain a deeper understanding of performing forensic analysis with Python, then this book is for you. Some Python experience would be helpful.

What You Will Learn

  • Explore the forensic analysis parameters of different platforms such as Windows, Android, and vSphere
  • Semi-automatically reconstruct major parts of the system activity and timeline
  • Leverage Python ctypes for protocol decoding
  • Examine artifacts from mobile, Skype, and browsers
  • Discover how to utilize Python to improve the focus of your analysis
  • Investigate volatile memory with the help of volatility on the Android and Linux platforms

In Detail

This book will teach you how to perform forensic analysis and investigations using various Python libraries. It starts by explaining the building blocks of the Python programming language, especially ctypes, in-depth, along with how to automate typical tasks in file system analysis, common correlation tasks to discover anomalies, and templates for investigations. Next, we'll show you cryptographic algorithms that can be used during forensic investigations.

Moving on, you'll learn how to sniff on the network, generate and analyze network flows, and perform log correlation with the help of Python scripts and tools. You'll get to know about the concepts of virtualization and how virtualization influences IT forensics, and you'll discover how to perform the forensic analysis of a jailbroken/rooted mobile device that is based on iOS or Android.

Finally, the book teaches you how to analyze volatile memory and search for known malware samples based on YARA rules.

To view this DRM protected ebook on your desktop or laptop you will need to have Adobe Digital Editions installed. It is a free software. We also strongly recommend that you sign up for an AdobeID at the Adobe website. For more details please see FAQ 1&2. To view this ebook on an iPhone, iPad or Android mobile device you will need the Adobe Digital Editions app, or BlueFire Reader or Txtr app. These are free, too. For more details see this article.

SHARE  Share by Email  Share on Facebook  Share on Twitter  Share on Linked In  Share on Delicious
or call in the US toll free 1-888-866-9150 product ID: 786870

Ebook Details
Pages: 192
Size: 1.8 MB
Publisher: Packt Publishing
Date published:   2015
ISBN: 2370007153732 (DRM-EPUB)

DRM Settings
Copying:not allowed
Printing:not allowed
Read Aloud:  not allowed

This product is listed in the following categories:

Nonfiction > Computers > Internet > Security
Nonfiction > Computers > Networking > Security

If you find anything wrong with this product listing, perhaps the description is wrong, the author is incorrect, or it is listed in the wrong category, then please contact us. We will promptly address your feedback.

Submit 5 page SummaryWhat is this?

© 2016