The Official CHFI Study Guide (Exam 312-49)

Description

This is the only official, EC-Council-endorsed CHFI (Computer Hacking Forensics Investigator) study guide. It was written for security professionals, systems administrators, IT consultants, legal professionals, IT managers, police and law enforcement personnel studying for the CHFI certification, and professionals needing the skills to identify an intruder's footprints and properly gather the necessary evidence to prosecute. Key features include:

.The Only Official Study Guide for CHFI
      Provides 100% coverage of all exam objectives.
.Full Web-based Exam
Modeled after the real exam, it also includes explanations of correct and incorrect answers.
.Exam Objectives
Each is clearly explained at the beginning of the chapter.
.Notes and Alerts
Highlight crucial points of the exam modules.
.Exam Objectives Fast Track
Bulleted highlights emphasize the important points from the exam's perspective at the end of the chapter.
.Key Terms
All concepts are defined and explained as they appear.
.Exam Objectives Frequently Asked Questions
Test what you have learned by reading FAQs based on the material covered in the chapter. Log on to the Syngress Web site to access review questions based on the exam.

CONTENTS:

Computer Forensics in Today's World
Law And Computer Forensics
Computer Investigation Process
Computer Security Incident Response Team
Computer Forensic Laboratory Requirements
Understanding File systems and Hard disks
Windows Forensics
Linux and Macintosh Boot processes
Linux Forensics
Data Acquisition and Duplication
Recovering Deleted Files
Image Files Forensics
Steganography
Computer Forensic Tools
Application password crackers
Investigating Logs
Investigating network traffic
Router Forensics
Investigating Web Attacks
Tracking E-mails and Investigating E-mail crimes
Mobile and PDA Forensics
Investigating Trademark and Copyright Infringement
Investigative Reports
Becoming an Expert Witness
Forensics in action