Notifications
Clear all

Book Wishlist

5 Posts
3 Users
0 Likes
785 Views
Vesalius
(@vesalius)
Posts: 66
Estimable Member
Topic starter
 

Hello Friends of the Forensic World,

Today I want to see the books you guys think I should purchase in regards to digital forensics. I would like to cover the majority of the digital forensic world. Primarily my tasks include Smartphone exploitation and extraction with analysis, and HDD recovery and analysis. Sorry for all the ands D

I am going to purchase a large amount of books and I would like your help on deciding what are the latest and best books out there to purchase. Books that could possible be helpful prior going to forensic courses such as FOR SANS courses, and to be fluent in the language of Digital Forensics.

 
Posted : 07/12/2016 12:04 pm
(@athulin)
Posts: 1156
Noble Member
 

Today I want to see the books you guys think I should purchase in regards to digital forensics. I would like to cover the majority of the digital forensic world.

The Book of Common Prayer … or whatever equivalent you have in your preferred religion/faith/denomination.

Brandon L. Garret's book Convicting the Innocent. Just to remind you what happens when 'experts' pontificate … especially over things they don't really know.

And perhaps the 2010 Christmas Whodunit of British Medical Journal 'The rise and fall of celebrity pathology' by Ian Burney, and Neil Pemberton, about Sir Bernard Spilsbury, forensic pathologist, who is suspected of being such a pontificator – at least to some extent.

Yes, you need to know what goes wrong in forensics. So far, noone has written a book on the errors of digital forensics, and what damage those have caused, but it probably won't be many years before it appears.

I am going to purchase a large amount of books and I would like your help on deciding what are the latest and best books out there to purchase. Books that could possible be helpful prior going to forensic courses such as FOR SANS courses, and to be fluent in the language of Digital Forensics.

Don't go for the latest. There will always be a new edition, a new version, with comparatively little substance. Go for the great those that you will return to. Look for books of reference, not book of instruction. Most new books date very, very rapidly.

Learn some science and scientific methodology learn to understand on what grounds you can claim to know what signs and indications do mean that a certain action was done, and what signs don't mean it. Learn some statistics, to understand just how many samples you need to have before you can say what is probable or not. Learn to think.

Learn IT. That's the basic field in which you would work.

I assume you already know that you learn better from books than from any other method of instruction. If not, you'll learn it, though at a cost. If you learn from trial and error, you may want to think about outfitting a small lab for experiments. Or learning to program smartphones – that will probably teach you more than most books you can buy.

 
Posted : 07/12/2016 9:35 pm
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

@athulin nice write-up, congratulations!

@Vesalius learning from books is just the theoretical base, which is needed of course, but the best way to learn things is to start working on forensic tasks which are lead by other with great experience. Shortly, be an forensic apprentice )

 
Posted : 08/12/2016 12:07 am
Vesalius
(@vesalius)
Posts: 66
Estimable Member
Topic starter
 

@Vesalius learning from books is just the theoretical base, which is needed of course, but the best way to learn things is to start working on forensic tasks which are lead by other with great experience. Shortly, be an forensic apprentice )

Agreed, I have been working "Practically" on digital forensics for 1 year now, but I have had Cellebrite at my disposal and magnet software's, both IEF and there latest Axiom.
I have used FTK Imager for grabbing good physical images of drives, and analyzing the image through Magnet, and have been extracting digital devices (mainly phones) using UFED4PC and Physical Analyzer.

I want to be fluent in the language of forensics, and I know that practice is the best method of learning and mastering digital forensics as a whole. I even have plans on buying more forensic software's such as oxygen, and even going on forensic courses to get good information. But as a whole, I just wanted a couple of good books that I can read to know the core of digital forensics and to be prepared for any conversations or debate that I may have with another forensic examiner in the future.

 
Posted : 08/12/2016 1:48 pm
passcodeunlock
(@passcodeunlock)
Posts: 792
Prominent Member
 

Besides the theoretical and practical parts, forensics is not only a profession, where you just learn things and then reuse yourself.

Forensics is a vocation, for having great success with your work, you need a lot of knowledge and patience, so I wish you good luck there! )

 
Posted : 08/12/2016 2:10 pm
Share: