|
Product: Book - Paperback
Title: File System Forensic Analysis Publisher: Addison-Wesley Professional Authors: Brian Carrier Rating: 5/5 Brian Carrier has written a solid book that should be on the reference shelf of anyone in the Digital Forensics field that conducts analysis of file systems. The book is well organized into three parts, each with multiple chapters. The first part discusses the foundations necessary to understand digital evidence, computer functions and acquiring data for analysis. This part is intentionally at a higher level, yet still provides the necessary foundations for the subsequent parts. A good explanation of host protected area (HPA) and device configuration overlays (DCO) is included, as well as methods by which one can test for such areas on volumes. The second part discusses volume analysis. Brian takes this topic and divides it into four chapters addressing basic volumes, personal computer volumes, server volumes and finally multiple disk volumes. He provides detailed information on a variety of common partition types, even including both SPARC and i386 partition information for Sun Solaris. Finally the third part discusses file system analysis, and the last 10 chapters are dedicated to covering general information, and then detailed descriptions of concepts, analysis and data structures for FAT, NTFS, Ext2, Ext3, UFS1 and UFS2 file systems. The detailed information provided well-documented explanations and included analysis scenarios. For instance, in his discussion of NTFS analysis, an image of a damaged disk is evaluated, and he provides meaningful explanations of reconstructing the damaged tables to allow analysis of the data. He provides many such examples throughout. An additional positive attribute to this work is the thorough bibliography placed after each chapter, which quickly provides the reader with other data sources, should they be needed. Overall, this is an excellent reference for anyone that must conduct analysis of file systems for investigative purposes. He provides clear information that is valuable, regardless of what tools an examiner may use to conduct analysis. This is definitely worth having on your bookshelf.
Product: Book - Paperback
Title: Windows Forms Programming in C# Publisher: Addison-Wesley Professional Authors: Chris Sells Rating: 5/5 As you would expect from Chris, all the important topics are covered in good depth (though sensibly he defers to the equally good "Essential .NET: Volume 1" in certain areas). Even advanced topics, such as data binding and design-time integration (which are nevertheless very relevant in "real world" scenarios), are made extremely approachable by the clear descriptions and useful advice given.
Product: Book - Paperback
Title: Beginning Active Server Pages 3.0 (Programmer to Programmer) Publisher: Wrox Authors: David Buser, John Kauffman, Juan T. Llibre, Brian Francis, Dave Sussman, Chris Ullman, Jon Duckett Rating: 5/5 This is one of the best intro books I have ever used. The chapters are well organized and the content is thoroughly explained.When completed, one could write a working useful ASP application based on the solid foundation this book provides you with.What is especially good is the coverage of other topics such as ADO ,XML etc. that other books ignore or assume you have previous knowledge of. I'm really looking forward to the Professional ASP book.
Product: Book - Paperback
Title: Unix in a Nutshell: A Desktop Quick Reference for SVR4 and Solaris 7 (3rd Edition) Publisher: O'Reilly Authors: Arnold Robbins Rating: 5/5 This book isn't going to teach you UNIX. If you're already familiar with UNIX, though, this book is an essential part of any IT reference library.
|