Computer Forensics: A Pocket Guide

CHAPTER 6: EMBEDDED AND NETWORK FORENSICS

The aim of this chapter is to provide an insight into the establishing discipline of embedded and network forensics. With embedded devices now encompassing a variety of everyday systems such as mobile phones, personal video recorders (PVRs) and game consoles, the ability to analyse those systems for forensic evidence can be key to establishing what happened in an incident. Furthermore, whilst computer and embedded forensics are able to establish evidence and events within systems, the increasing connectivity of devices means large volumes of evidence may reside on a variety of network appliances. Network forensics is useful for evidence gathering as it often provides a valuable overview of communications, ...