CD and DVD Forensics
CD and DVD Forensics will take the reader through all facets of handling, examining, and processing CD and DVD evidence for computer forensics. At a time where data forensics is becoming a major part of law enforcement and prosecution in the public sector, and corporate and system security in the private sector, the interest in this subject has just begun to blossom.
CD and DVD Forensics is a how to book that will give the reader tools to be able to open CDs and DVDs in an effort to identify evidence of a crime. These tools can be applied in both the public and private sectors. Armed with this information, law enforcement, corporate security, and private investigators will be able to be more effective in their evidence related tasks. To accomplish this the book is divided into four basic parts: (a) CD and DVD physics dealing with the history, construction and technology of CD and DVD media, (b) file systems present on CDs and DVDs and how these are different from that which is found on hard disks, floppy disks and other media, (c) considerations for handling CD and DVD evidence to both recover the maximum amount of information present on a disc and to do so without destroying or altering the disc in any way, and (d) using the InfinaDyne product CD/DVD Inspector to examine discs in detail and collect evidence.
What people are saying - Write a review
We haven't found any reviews in the usual places.
Chapter 2 CD and DVD Logical Structure
Chapter 3 Forensic Binary Images
Chapter 4 Collecting CD and DVD Evidence
Chapter 5 Preparing for Disc Examination
Chapter 6 CDDVD Inspector The Basics
Chapter 7 Using CDDVD Inspector
Chapter 8 Advanced Tasks with CDDVD Inspector
Analysis ASCII audio discs audio track big-endian binary bootable bytes CD and DVD CD or DVD CD Text CD-R CD-RW CD/DVD Inspector CD+G characters Compact Disc copy data sectors device Digital Versatile Disc DirectCD directory entry Disc Memory disc.The DVD drive DVD media DVD-R DVD+R El Torito endian error field contains file names filename folder hard drive hash set HFS+ identifier image file indicates InfinaDyne interface Joliet file system laser little-endian Macintosh manufactured MD5 hash value message is displayed Microsoft Windows Mode 2 Form Motorola format multiple operating system optical option pane path table polycarbonate POSIX reflector rewritable media Rock Ridge extensions root directory sector number selected session Sharing Protocol spindle standard subchannel System Use Sharing technique timestamp UDF file system Unicode user data volume created Volume Descriptor Volume Information writing software written XA mode