Computer-Forensik

Companies and public authorities protect their IT systems with comprehensive security measures. Nevertheless, these systems are repeatedly misused for criminal purposes or attacked by malicious hackers. After such incidents, people want to know how it happened, how severe the breach is, who the perpetrator was, and how they can be held accountable. Computer forensics is employed for this purpose. Similar to traditional law enforcement, computer forensics focuses on the following information: who, what, where, when, with what, how, and why. This book provides an overview of how to approach computer forensics, both in the "case of emergencies" and in preparations for potential attacks or cybercrime. It details, with numerous examples, the tools and methods available and how to apply them.