Computer-Forensik

Companies and public authorities protect their IT systems with comprehensive security measures. Nevertheless, these systems are repeatedly misused for criminal purposes or attacked by malicious hackers. After such incidents, people want to know how it happened, how serious the break-in is, who the culprit was, and how they can be held responsible. Computer forensics is used for this. Similar to classic criminal prosecution, computer forensics focuses on the following information: who, what, where, when, with what, how, and why. This book gives an overview of how to proceed in computer forensic work, both in the "case of the cases" as well as in the preparations for possible attacks or computer crimes. It shows in detail and with numerous examples which tools and methods are available and how to use them.