Terrence Lillard (et al.) | 2010 | ISBN: 1597495379 | English | 400 pages | PDF | 13 MB

The field of digital and computer forensics has revolved around the information stored in volatile and non-volatile memory. Traditional forensics focused on imaging the hard drive and using special tools to analyze the image from a forensics perspective. That works great if you know where the evidence is, or you have a limited scope of systems to analyze. With the push towards cloud computing, applications and data are now stored in data centers located throughout the world. In addition, with the popularity of wireless hotspots, evidence is now a moving target and in some cases the forensic analysis needs to be conducted directly on the network. With technology moving to the "cloud" there needs to be an innovative new way to identify and analyze network traffic. This book focuses on this transition between systems through the "cloud" and to the user's hard drive.