Search icon CANCEL
Subscription
0
Cart icon
Your Cart (0 item)
Close icon
You have no products in your basket yet
Save more on your purchases! discount-offer-chevron-icon
Savings automatically calculated. No voucher code required.
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Newsletter Hub
Free Learning
Arrow right icon
timer SALE ENDS IN
0 Days
:
00 Hours
:
00 Minutes
:
00 Seconds
Digital Forensics and Incident Response
Digital Forensics and Incident Response

Digital Forensics and Incident Response: Incident response tools and techniques for effective cyber threat response , Third Edition

eBook
$9.99 $43.99
Paperback
$54.99
Audiobook
$9.99 $57.99
Subscription
Free Trial
Renews at $19.99p/m

What do you get with eBook?

Product feature icon Instant access to your Digital eBook purchase
Product feature icon Download this book in EPUB and PDF formats
Product feature icon Access this title in our online reader with advanced features
Product feature icon DRM FREE - Read whenever, wherever and however you want
Product feature icon AI Assistant (beta) to help accelerate your learning
OR
Modal Close icon
Payment Processing...
tick Completed

Billing Address

Table of content icon View table of contents Preview book icon Preview Book

Digital Forensics and Incident Response

Part 1: Foundations of Incident Response and Digital Forensics

Part 1 of the book lays the foundations of incident response (IR) and digital forensics. These foundational elements, such as the IR process, forensic principles, and incident management, will tie directly to subsequent parts of the book.

This part comprises the following chapters:

Left arrow icon Right arrow icon

Key benefits

  • Create a solid incident response framework and manage cyber incidents effectively
  • Learn to apply digital forensics tools and techniques to investigate cyber threats
  • Explore the real-world threat of ransomware and apply proper incident response techniques for investigation and recovery

Description

An understanding of how digital forensics integrates with the overall response to cybersecurity incidents is key to securing your organization’s infrastructure from attacks. This updated third edition will help you perform cutting-edge digital forensic activities and incident response with a new focus on responding to ransomware attacks. After covering the fundamentals of incident response that are critical to any information security team, you’ll explore incident response frameworks. From understanding their importance to creating a swift and effective response to security incidents, the book will guide you using examples. Later, you’ll cover digital forensic techniques, from acquiring evidence and examining volatile memory through to hard drive examination and network-based evidence. You’ll be able to apply these techniques to the current threat of ransomware. As you progress, you’ll discover the role that threat intelligence plays in the incident response process. You’ll also learn how to prepare an incident response report that documents the findings of your analysis. Finally, in addition to various incident response activities, the book will address malware analysis and demonstrate how you can proactively use your digital forensic skills in threat hunting. By the end of this book, you’ll be able to investigate and report unwanted security breaches and incidents in your organization.

Who is this book for?

This book is for cybersecurity and information security professionals who want to implement digital forensics and incident response in their organizations. You’ll also find the book helpful if you’re new to the concept of digital forensics and looking to get started with the fundamentals. A basic understanding of operating systems and some knowledge of networking fundamentals are required to get started with this book.

What you will learn

  • Create and deploy an incident response capability within your own organization
  • Perform proper evidence acquisition and handling
  • Analyze the evidence collected and determine the root cause of a security incident
  • Integrate digital forensic techniques and procedures into the overall incident response process
  • Understand different techniques for threat hunting
  • Write incident reports that document the key findings of your analysis
  • Apply incident response practices to ransomware attacks
  • Leverage cyber threat intelligence to augment digital forensics findings

Product Details

Country selected
Publication date, Length, Edition, Language, ISBN-13
Publication date : Dec 16, 2022
Length: 532 pages
Edition : 3rd
Language : English
ISBN-13 : 9781803230252
Category :
Concepts :

What do you get with eBook?

Product feature icon Instant access to your Digital eBook purchase
Product feature icon Download this book in EPUB and PDF formats
Product feature icon Access this title in our online reader with advanced features
Product feature icon DRM FREE - Read whenever, wherever and however you want
Product feature icon AI Assistant (beta) to help accelerate your learning
OR
Modal Close icon
Payment Processing...
tick Completed

Billing Address

Product Details

Publication date : Dec 16, 2022
Length: 532 pages
Edition : 3rd
Language : English
ISBN-13 : 9781803230252
Category :
Concepts :

Packt Subscriptions

See our plans and pricing
Modal Close icon
$19.99 billed monthly
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Simple pricing, no contract
$199.99 billed annually
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Choose a DRM-free eBook or Video every month to keep
Feature tick icon PLUS own as many other DRM-free eBooks or Videos as you like for just $5 each
Feature tick icon Exclusive print discounts
$279.99 billed in 18 months
Feature tick icon Unlimited access to Packt's library of 7,000+ practical books and videos
Feature tick icon Constantly refreshed with 50+ new titles a month
Feature tick icon Exclusive Early access to books as they're written
Feature tick icon Solve problems while you work with advanced search and reference features
Feature tick icon Offline reading on the mobile app
Feature tick icon Choose a DRM-free eBook or Video every month to keep
Feature tick icon PLUS own as many other DRM-free eBooks or Videos as you like for just $5 each
Feature tick icon Exclusive print discounts

Frequently bought together


Stars icon
Total $ 146.97
Cybersecurity – Attack and Defense Strategies, 3rd edition
$41.99
Learn Computer Forensics – 2nd edition
$49.99
Digital Forensics and Incident Response
$54.99
Total $ 146.97 Stars icon
Banner background image

Table of Contents

26 Chapters
Part 1: Foundations of Incident Response and Digital Forensics Chevron down icon Chevron up icon
Chapter 1: Understanding Incident Response Chevron down icon Chevron up icon
Chapter 2: Managing Cyber Incidents Chevron down icon Chevron up icon
Chapter 3: Fundamentals of Digital Forensics Chevron down icon Chevron up icon
Chapter 4: Investigation Methodology Chevron down icon Chevron up icon
Part 2: Evidence Acquisition Chevron down icon Chevron up icon
Chapter 5: Collecting Network Evidence Chevron down icon Chevron up icon
Chapter 6: Acquiring Host-Based Evidence Chevron down icon Chevron up icon
Chapter 7: Remote Evidence Collection Chevron down icon Chevron up icon
Chapter 8: Forensic Imaging Chevron down icon Chevron up icon
Part 3: Evidence Analysis Chevron down icon Chevron up icon
Chapter 9: Analyzing Network Evidence Chevron down icon Chevron up icon
Chapter 10: Analyzing System Memory Chevron down icon Chevron up icon
Chapter 11: Analyzing System Storage Chevron down icon Chevron up icon
Chapter 12: Analyzing Log Files Chevron down icon Chevron up icon
Chapter 13: Writing the Incident Report Chevron down icon Chevron up icon
Part 4: Ransomware Incident Response Chevron down icon Chevron up icon
Chapter 14: Ransomware Preparation and Response Chevron down icon Chevron up icon
Chapter 15: Ransomware Investigations Chevron down icon Chevron up icon
Part 5: Threat Intelligence and Hunting Chevron down icon Chevron up icon
Chapter 16: Malware Analysis for Incident Response Chevron down icon Chevron up icon
Chapter 17: Leveraging Threat Intelligence Chevron down icon Chevron up icon
Chapter 18: Threat Hunting Chevron down icon Chevron up icon
Assessments Chevron down icon Chevron up icon
Index Chevron down icon Chevron up icon
Other Books You May Enjoy Chevron down icon Chevron up icon

Customer reviews

Top Reviews
Rating distribution
Full star icon Full star icon Full star icon Full star icon Half star icon 4.9
(15 Ratings)
5 star 93.3%
4 star 6.7%
3 star 0%
2 star 0%
1 star 0%
Filter icon Filter
Top Reviews

Filter reviews by




N/A Feb 21, 2024
Full star icon Full star icon Full star icon Full star icon Full star icon 5
Pubblicazioni interessanti scritti con il giusto livello tecnico ma soprattutto chiaro.
Feefo Verified review Feefo
Emma Jun 06, 2024
Full star icon Full star icon Full star icon Full star icon Full star icon 5
The media could not be loaded.
Amazon Verified review Amazon
CRF Feb 10, 2023
Full star icon Full star icon Full star icon Full star icon Full star icon 5
Digital Forensics and Incident Response by Gerard Johansen is an exceptional resource for anyone interested in the field of digital forensics and incident response. The book provides a comprehensive overview of the topic and covers everything from the basics of digital forensics to more advanced topics such as network forensics and malware analysis.One of the things that I particularly liked about this book is the way that it is written. The author has a clear and concise writing style that is easy to follow, even for those who are new to the subject. The book is also well-organized and structured in a logical manner, making it easy to find the information that you need.Another great thing about this book is the way that it is presented. The author uses a variety of real-world examples and case studies to illustrate key concepts and techniques, which helps to make the material more engaging and relevant.Overall, I would highly recommend Digital Forensics and Incident Response by Gerard Johansen to anyone who is interested in learning more about this fascinating field. Whether you are a seasoned professional or just starting out, this book is sure to provide you with valuable insights and practical advice that you can use to improve your skills and knowledge.
Amazon Verified review Amazon
YASITU RICHARDSON Apr 27, 2024
Full star icon Full star icon Full star icon Full star icon Full star icon 5
I was pleasantly surprised to learn that Digital Forensics and Incident Response - Third Edition goes beyond what I expected from an Incident response book by delving into topics like Threat Hunting and Threat Intelligence. All the software used in the book is listed at the beginning.It starts with Foundations of Incident Response and Digital Forensics - This section gives a good background on IR framework based off of NIST IR process. It also covers methodology and fundamentals of IR and IR teams.Evidence Acquisition and analysis are next and this section as implied covers collecting evidence from memory, network, hosts both locally and remotely. Unfortunately collection from cloud instances is not covered, but it may be beyond the scope of the book.Digital Forensics and Incident Response - Third Edition does a great job in detailing how to deal with ransomeware incidents and covers topics such as preparing your systems to be more resilient against ransomeware. The last section goes into threat hunting and I thought this was a great addition to the book. Threat hunting and intelligence is crucial for any network.
Amazon Verified review Amazon
Lars Daniel Jan 30, 2023
Full star icon Full star icon Full star icon Full star icon Full star icon 5
Johansen's writing style is engaging and easy to follow, making it accessible for readers with varying levels of technical knowledge. He does an excellent job of breaking down complex topics and explaining them in a way that is easy to understand. I highly recommend "Digital Forensics and Incident Response" to anyone beginning or seeking a career in CSIRT.
Amazon Verified review Amazon
Get free access to Packt library with over 7500+ books and video courses for 7 days!
Start Free Trial

FAQs

How do I buy and download an eBook? Chevron down icon Chevron up icon

Where there is an eBook version of a title available, you can buy it from the book details for that title. Add either the standalone eBook or the eBook and print book bundle to your shopping cart. Your eBook will show in your cart as a product on its own. After completing checkout and payment in the normal way, you will receive your receipt on the screen containing a link to a personalised PDF download file. This link will remain active for 30 days. You can download backup copies of the file by logging in to your account at any time.

If you already have Adobe reader installed, then clicking on the link will download and open the PDF file directly. If you don't, then save the PDF file on your machine and download the Reader to view it.

Please Note: Packt eBooks are non-returnable and non-refundable.

Packt eBook and Licensing When you buy an eBook from Packt Publishing, completing your purchase means you accept the terms of our licence agreement. Please read the full text of the agreement. In it we have tried to balance the need for the ebook to be usable for you the reader with our needs to protect the rights of us as Publishers and of our authors. In summary, the agreement says:

  • You may make copies of your eBook for your own use onto any machine
  • You may not pass copies of the eBook on to anyone else
How can I make a purchase on your website? Chevron down icon Chevron up icon

If you want to purchase a video course, eBook or Bundle (Print+eBook) please follow below steps:

  1. Register on our website using your email address and the password.
  2. Search for the title by name or ISBN using the search option.
  3. Select the title you want to purchase.
  4. Choose the format you wish to purchase the title in; if you order the Print Book, you get a free eBook copy of the same title. 
  5. Proceed with the checkout process (payment to be made using Credit Card, Debit Cart, or PayPal)
Where can I access support around an eBook? Chevron down icon Chevron up icon
  • If you experience a problem with using or installing Adobe Reader, the contact Adobe directly.
  • To view the errata for the book, see www.packtpub.com/support and view the pages for the title you have.
  • To view your account details or to download a new copy of the book go to www.packtpub.com/account
  • To contact us directly if a problem is not resolved, use www.packtpub.com/contact-us
What eBook formats do Packt support? Chevron down icon Chevron up icon

Our eBooks are currently available in a variety of formats such as PDF and ePubs. In the future, this may well change with trends and development in technology, but please note that our PDFs are not Adobe eBook Reader format, which has greater restrictions on security.

You will need to use Adobe Reader v9 or later in order to read Packt's PDF eBooks.

What are the benefits of eBooks? Chevron down icon Chevron up icon
  • You can get the information you need immediately
  • You can easily take them with you on a laptop
  • You can download them an unlimited number of times
  • You can print them out
  • They are copy-paste enabled
  • They are searchable
  • There is no password protection
  • They are lower price than print
  • They save resources and space
What is an eBook? Chevron down icon Chevron up icon

Packt eBooks are a complete electronic version of the print edition, available in PDF and ePub formats. Every piece of content down to the page numbering is the same. Because we save the costs of printing and shipping the book to you, we are able to offer eBooks at a lower cost than print editions.

When you have purchased an eBook, simply login to your account and click on the link in Your Download Area. We recommend you saving the file to your hard drive before opening it.

For optimal viewing of our eBooks, we recommend you download and install the free Adobe Reader version 9.