Discover millions of ebooks, audiobooks, and so much more with a free trial

Only $11.99/month after trial. Cancel anytime.

Integrating Python with Leading Computer Forensics Platforms
Integrating Python with Leading Computer Forensics Platforms
Integrating Python with Leading Computer Forensics Platforms
Ebook264 pages1 hour

Integrating Python with Leading Computer Forensics Platforms

Rating: 0 out of 5 stars

()

Read preview

About this ebook

Integrating Python with Leading Computer Forensic Platforms takes a definitive look at how and why the integration of Python advances the field of digital forensics. In addition, the book includes practical, never seen Python examples that can be immediately put to use. Noted author Chet Hosmer demonstrates how to extend four key Forensic Platforms using Python, including EnCase by Guidance Software, MPE+ by AccessData, The Open Source Autopsy/SleuthKit by Brian Carrier and WetStone Technologies, and Live Acquisition and Triage Tool US-LATT. This book is for practitioners, forensic investigators, educators, students, private investigators, or anyone advancing digital forensics for investigating cybercrime.

Additionally, the open source availability of the examples allows for sharing and growth within the industry. This book is the first to provide details on how to directly integrate Python into key forensic platforms.

  • Provides hands-on tools, code samples, detailed instruction, and documentation that can be immediately put to use
  • Shows how to integrate Python with popular digital forensic platforms, including EnCase, MPE+, The Open Source Autopsy/SleuthKit, and US-LATT
  • Presents complete coverage of how to use Open Source Python scripts to extend and modify popular digital forensic Platforms
LanguageEnglish
Release dateSep 26, 2016
ISBN9780128099506
Integrating Python with Leading Computer Forensics Platforms
Author

Chet Hosmer

Chet Hosmer serves as an Assistant Professor of Practice at the University of Arizona in the Cyber Operations program, where he is teaching and researching the application of Python and Machine Learning to advanced cybersecurity challenges. Chet is also the founder of Python Forensics, Inc. a non-profit organization focused on the collaborative development of open-source investigative technologies using Python and other popular scripting languages. Chet has made numerous appearances to discuss emerging cyber threats including NPR, ABC News, Forbes, IEEE, The New York Times, The Washington Post, Government Computer News, Salon.com, and Wired Magazine. He has 7 published books with Elsevier and Apress that focus on data hiding, passive network defense strategies, Python Forensics, PowerShell, and IoT.

Read more from Chet Hosmer

Related to Integrating Python with Leading Computer Forensics Platforms

Related ebooks

Information Technology For You

View More

Related articles

Reviews for Integrating Python with Leading Computer Forensics Platforms

Rating: 0 out of 5 stars
0 ratings

0 ratings0 reviews

What did you think?

Tap to rate

Review must be at least 10 words

    Book preview

    Integrating Python with Leading Computer Forensics Platforms - Chet Hosmer

    be.

    Chapter 1

    Integrating Python With Forensics Platforms

    Abstract

    This chapter introduces the key objectives of the book and identifies other resources for further study, along with basic Python fundamentals for those new to the language. We also define the specific forensic platforms that will be the basis for the integration methods. We must answer the critical question of what options for integration exist and how might they be useful to forensics? Finally, we answer how do the resulting scripts and integrations benefit from using Python?

    Keywords

    Python; Forensics; Encase; Guidance Software; MPE +; Access Data; Paraben P2 Commander; WetStone; US-LATT; Autopsy; Brian Carrier; Open source; Preprocessing; Postprocessing; Application programming interface; Hard problems; Encryption; Steganography; Rainbow tables; Geo-location; eXtensible Markup Language; Comma-separated value

    Introduction

    The Python programming language and environment has proven to be easy to learn and use, and is adaptable to virtually any domain or challenge problem. Companies such as Google, Dropbox, Disney, Industrial Light and Magic, and YouTube just to mention a handful are using Python within their operations. Additionally, organizations such as NASA's Jet Propulsion Lab, the National Weather Service, the Swedish Meteorological and Hydrological Institute (SMHI), and Lawrence Livermore National Laboratory rely on Python to build models, make predictions, run experiments, and control critical operational systems.

    When integrating Python with computer forensic platforms, several areas can benefit:

    (1) Automation of current manual processes

    (2) Rapid prototyping of new examination methods

    (3) Access to a rich library of packages that can accelerate the development of new approaches

    (4) Enhanced performance by leveraging multiprocessing, set theory, dictionaries, and other advanced methods that are ideally suited to enhance forensic examination

    For those new to Python, the best place to start is at the Python Software Foundation (PSF), website at www.python.org as depicted in Fig.

    Enjoying the preview?
    Page 1 of 1