Chapter 16

Forensic Concepts

This chapter covers the following topics:

  • Legal vs. Internal Corporate Purposes: This section covers balancing legal requirements and corporate goals and purposes.

  • Forensic Process: This section covers the steps in the forensic process: identification, evidence collection (including issues related to chain of custody and order of volatility), cloning, evidence preservation, analysis, verification, and presentation.

  • Integrity Preservation: This section covers activities such as hashing to ensure evidence integrity.

  • Cryptanalysis: This section covers processes used to attack an algorithm or its implementation.

  • Steganalysis: This section describes steganalysis, which is a method of hiding data in a graphic.

This chapter ...

Get CompTIA Advanced Security Practitioner (CASP+) CAS-004 Cert Guide now with the O’Reilly learning platform.

O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.