The Experts below are selected from a list of 24 Experts worldwide ranked by ideXlab platform

Anthony Reyes - One of the best experts on this subject based on the ideXlab platform.

  • Chapter 13 – Windows and Linux Forensics
    The Best Damn Cybercrime and Digital Forensics Book Period, 2007
    Co-Authors: Jack Wiles, Anthony Reyes
    Abstract:

    This chapter discusses Windows and Linux-based forensic tools. The Windows operating system contains a number of locations that act as a rich source of evidence. Information gathering through investigating hidden files can be extremely helpful to any investigation. Even file attributes and time stamps are valuable. Often, a perpetrator may attempt to change a file's attributes in order to either cover their tracks or hide important data that may be present in the system. Collating time stamps, for instance, can aid in reconstructing the actions taken by the suspect. Some of the more important sources of electronic evidence on a Windows host include: files, slack space, and swap file. Linux imparts greater control, flexibility, and power as a Forensics tool than Windows, due to its ability to access devices at a physical layer. The addition of a number of simple utilities makes imaging and basic analysis of suspect disks and drives easier, allowing for a simpler imaging process once the forensic analyst becomes familiar with the command-line quirks associated with Linux. To help reduce the issues associated with the Linux command-line, several popular Linux toolkits that provide a graphical user interface (GUI) have been developed.

  • chapter 13 windows and Linux Forensics
    The Best Damn Cybercrime and Digital Forensics Book Period, 2007
    Co-Authors: Jack Wiles, Anthony Reyes
    Abstract:

    This chapter discusses Windows and Linux-based forensic tools. The Windows operating system contains a number of locations that act as a rich source of evidence. Information gathering through investigating hidden files can be extremely helpful to any investigation. Even file attributes and time stamps are valuable. Often, a perpetrator may attempt to change a file's attributes in order to either cover their tracks or hide important data that may be present in the system. Collating time stamps, for instance, can aid in reconstructing the actions taken by the suspect. Some of the more important sources of electronic evidence on a Windows host include: files, slack space, and swap file. Linux imparts greater control, flexibility, and power as a Forensics tool than Windows, due to its ability to access devices at a physical layer. The addition of a number of simple utilities makes imaging and basic analysis of suspect disks and drives easier, allowing for a simpler imaging process once the forensic analyst becomes familiar with the command-line quirks associated with Linux. To help reduce the issues associated with the Linux command-line, several popular Linux toolkits that provide a graphical user interface (GUI) have been developed.

Jack Wiles - One of the best experts on this subject based on the ideXlab platform.

  • Chapter 13 – Windows and Linux Forensics
    The Best Damn Cybercrime and Digital Forensics Book Period, 2007
    Co-Authors: Jack Wiles, Anthony Reyes
    Abstract:

    This chapter discusses Windows and Linux-based forensic tools. The Windows operating system contains a number of locations that act as a rich source of evidence. Information gathering through investigating hidden files can be extremely helpful to any investigation. Even file attributes and time stamps are valuable. Often, a perpetrator may attempt to change a file's attributes in order to either cover their tracks or hide important data that may be present in the system. Collating time stamps, for instance, can aid in reconstructing the actions taken by the suspect. Some of the more important sources of electronic evidence on a Windows host include: files, slack space, and swap file. Linux imparts greater control, flexibility, and power as a Forensics tool than Windows, due to its ability to access devices at a physical layer. The addition of a number of simple utilities makes imaging and basic analysis of suspect disks and drives easier, allowing for a simpler imaging process once the forensic analyst becomes familiar with the command-line quirks associated with Linux. To help reduce the issues associated with the Linux command-line, several popular Linux toolkits that provide a graphical user interface (GUI) have been developed.

  • chapter 13 windows and Linux Forensics
    The Best Damn Cybercrime and Digital Forensics Book Period, 2007
    Co-Authors: Jack Wiles, Anthony Reyes
    Abstract:

    This chapter discusses Windows and Linux-based forensic tools. The Windows operating system contains a number of locations that act as a rich source of evidence. Information gathering through investigating hidden files can be extremely helpful to any investigation. Even file attributes and time stamps are valuable. Often, a perpetrator may attempt to change a file's attributes in order to either cover their tracks or hide important data that may be present in the system. Collating time stamps, for instance, can aid in reconstructing the actions taken by the suspect. Some of the more important sources of electronic evidence on a Windows host include: files, slack space, and swap file. Linux imparts greater control, flexibility, and power as a Forensics tool than Windows, due to its ability to access devices at a physical layer. The addition of a number of simple utilities makes imaging and basic analysis of suspect disks and drives easier, allowing for a simpler imaging process once the forensic analyst becomes familiar with the command-line quirks associated with Linux. To help reduce the issues associated with the Linux command-line, several popular Linux toolkits that provide a graphical user interface (GUI) have been developed.

Peter Herzog - One of the best experts on this subject based on the ideXlab platform.

  • Hacking Exposed Linux
    2008
    Co-Authors: Peter Herzog
    Abstract:

    The Latest Linux Security Solutions This authoritative guide will help you secure your Linux network--whether you use Linux as a desktop OS, for Internet services, for telecommunications, or for wireless services. Completely rewritten the ISECOM way, Hacking Exposed Linux, Third Edition provides the most up-to-date coverage available from a large team of topic-focused experts. The book is based on the latest ISECOM security research and shows you, in full detail, how to lock out intruders  and defend your Linux systems against catastrophic attacks. Secure Linux by using attacks and countermeasures from the latest OSSTMM research Follow attack techniques of PSTN, ISDN, and PSDN over Linux Harden VoIP, Bluetooth, RF, RFID, and IR devices on Linux Block Linux signal jamming, cloning, and eavesdropping attacks Apply Trusted Computing and cryptography tools for your best defense Fix vulnerabilities in DNS, SMTP, and Web 2.0 services Prevent SPAM, Trojan, phishing, DoS, and DDoS exploits Find and repair errors in C code with static analysis and Hoare Logic Table of contents Foreword Acknowledgments Introduction Part I: Security and Controls Chapter 1. Applying Security Chapter 2. Applying Interactive Controls Chapter 3. Applying Process Controls Part II: Hacking the System Chapter 4. Local Access Control Chapter 5. Data Networks Security Chapter 6. Unconventional Data Attack Vectors Chapter 7. Voice over IP Chapter 8. Wireless Networks Chapter 9. Input/Output Devices Chapter 10. RFID--Radio Frequency Identification Chapter 11. Emanation Attacks Chapter 12. Trusted Computing Part III: Hacking the Users Chapter 13. Web Application Hacking Chapter 14. Mail Services Chapter 15. Name Services Part IV: Care and Maintenance Chapter 16. Reliability: Static Analysis of C Code Chapter 17. Security Tweaks in the Linux Kernal Part V: Appendixes Appendix A. Management and Maintenance Appendix B. Linux Forensics and Data Recovery Appendix C. BSD Index

Isecom - One of the best experts on this subject based on the ideXlab platform.

  • Hacking exposed Linux : Linux security secrets & solutions
    2008
    Co-Authors: Isecom
    Abstract:

    Foreword Acknowledgments Introduction Part I: Security and Controls Chapter 1. Applying Security Chapter 2. Applying Interactive Controls Chapter 3. Applying Process Controls Part II: Hacking the System Chapter 4. Local Access Control Chapter 5. Data Networks Security Chapter 6. Unconventional Data Attack Vectors Chapter 7. Voice over IP Chapter 8. Wireless Networks Chapter 9. Input/Output Devices Chapter 10. RFID--Radio Frequency Identification Chapter 11. Emanation Attacks Chapter 12. Trusted Computing Part III: Hacking the Users Chapter 13. Web Application Hacking Chapter 14. Mail Services Chapter 15. Name Services Part IV: Care and Maintenance Chapter 16. Reliability: Static Analysis of C Code Chapter 17. Security Tweaks in the Linux Kernal Part V: Appendixes Appendix A. Management and Maintenance Appendix B. Linux Forensics and Data Recovery Appendix C. BSD Index

Niranjan Reddy - One of the best experts on this subject based on the ideXlab platform.

  • Linux Forensics
    Practical Cyber Forensics, 2019
    Co-Authors: Niranjan Reddy
    Abstract:

    Linux is a UNIX-like open source operating system gifted to the world by Linus Torvalds. Here the word open source sticks out as it refers to the licensing nature of Linux. Being open source meant that Linux was free and not owned by anyone. The source code is available to download and use for the public. Linux stays free as it is distributed under a GNU General Public License. This makes Linux a popular choice for computer enthusiasts and developers. Linux is a fast and secure alternative to other operating systems.