<?xml version="1.0" encoding="UTF-8"?>
<record
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.loc.gov/MARC21/slim http://www.loc.gov/standards/marcxml/schema/MARC21slim.xsd"
    xmlns="http://www.loc.gov/MARC21/slim">

  <leader>06062cam a2200553Mi 4500</leader>
  <controlfield tag="001">ocn934476226</controlfield>
  <controlfield tag="003">OCoLC</controlfield>
  <controlfield tag="005">20190328114813.0</controlfield>
  <controlfield tag="006">m     o  d        </controlfield>
  <controlfield tag="007">cr |n|||||||||</controlfield>
  <controlfield tag="008">151211s2016    mau     ob    001 0 eng d</controlfield>
  <datafield tag="040" ind1=" " ind2=" ">
    <subfield code="a">YDXCP</subfield>
    <subfield code="b">eng</subfield>
    <subfield code="e">rda</subfield>
    <subfield code="e">pn</subfield>
    <subfield code="c">YDXCP</subfield>
    <subfield code="d">OCLCO</subfield>
    <subfield code="d">OCLCF</subfield>
    <subfield code="d">UMI</subfield>
    <subfield code="d">B24X7</subfield>
    <subfield code="d">STF</subfield>
    <subfield code="d">IDEBK</subfield>
    <subfield code="d">N$T</subfield>
    <subfield code="d">TEFOD</subfield>
    <subfield code="d">CDX</subfield>
    <subfield code="d">EBLCP</subfield>
    <subfield code="d">COO</subfield>
    <subfield code="d">KSU</subfield>
    <subfield code="d">DEBBG</subfield>
    <subfield code="d">IDB</subfield>
    <subfield code="d">OPELS</subfield>
    <subfield code="d">LND</subfield>
    <subfield code="d">CDN</subfield>
    <subfield code="d">Z5A</subfield>
    <subfield code="d">LIV</subfield>
    <subfield code="d">OCLCQ</subfield>
    <subfield code="d">MERUC</subfield>
    <subfield code="d">OCLCQ</subfield>
    <subfield code="d">CNCGM</subfield>
    <subfield code="d">D6H</subfield>
    <subfield code="d">VVB</subfield>
    <subfield code="d">WRM</subfield>
    <subfield code="d">U3W</subfield>
    <subfield code="d">OCLCQ</subfield>
    <subfield code="d">CEF</subfield>
    <subfield code="d">EZ9</subfield>
    <subfield code="d">YDX</subfield>
    <subfield code="d">TXM</subfield>
    <subfield code="d">AU@</subfield>
  </datafield>
  <datafield tag="019" ind1=" " ind2=" ">
    <subfield code="a">932049481</subfield>
    <subfield code="a">932524451</subfield>
    <subfield code="a">933449786</subfield>
    <subfield code="a">935251107</subfield>
    <subfield code="a">944986498</subfield>
    <subfield code="a">966354953</subfield>
  </datafield>
  <datafield tag="020" ind1=" " ind2=" ">
    <subfield code="a">0128045426</subfield>
    <subfield code="q">(electronic bk.)</subfield>
  </datafield>
  <datafield tag="020" ind1=" " ind2=" ">
    <subfield code="a">9780128045428</subfield>
    <subfield code="q">(electronic bk.)</subfield>
  </datafield>
  <datafield tag="020" ind1=" " ind2=" ">
    <subfield code="z">0128045264</subfield>
  </datafield>
  <datafield tag="020" ind1=" " ind2=" ">
    <subfield code="z">9780128045268</subfield>
  </datafield>
  <datafield tag="035" ind1=" " ind2=" ">
    <subfield code="a">(OCoLC)934476226</subfield>
    <subfield code="z">(OCoLC)932049481</subfield>
    <subfield code="z">(OCoLC)932524451</subfield>
    <subfield code="z">(OCoLC)933449786</subfield>
    <subfield code="z">(OCoLC)935251107</subfield>
    <subfield code="z">(OCoLC)944986498</subfield>
    <subfield code="z">(OCoLC)966354953</subfield>
  </datafield>
  <datafield tag="050" ind1=" " ind2="4">
    <subfield code="a">HV8079.C65</subfield>
    <subfield code="b">S35 2016</subfield>
  </datafield>
  <datafield tag="072" ind1=" " ind2="7">
    <subfield code="a">BUS</subfield>
    <subfield code="x">032000</subfield>
    <subfield code="2">bisacsh</subfield>
  </datafield>
  <datafield tag="072" ind1=" " ind2="7">
    <subfield code="a">SOC</subfield>
    <subfield code="x">000000</subfield>
    <subfield code="2">bisacsh</subfield>
  </datafield>
  <datafield tag="082" ind1="0" ind2="4">
    <subfield code="a">363.25/968</subfield>
    <subfield code="2">23</subfield>
  </datafield>
  <datafield tag="100" ind1="1" ind2=" ">
    <subfield code="a">Sammons, John,</subfield>
    <subfield code="e">author.</subfield>
  </datafield>
  <datafield tag="245" ind1="1" ind2="0">
    <subfield code="a">Digital Forensics : threatscape and best practices / </subfield>
    <subfield code="h">[electronic resource]</subfield>
    <subfield code="c">edited by John Sammons.</subfield>
  </datafield>
  <datafield tag="264" ind1=" " ind2="4">
    <subfield code="c">&#xFFFD;2016</subfield>
  </datafield>
  <datafield tag="264" ind1=" " ind2="1">
    <subfield code="a">Waltham, MA :</subfield>
    <subfield code="b">Syngress is an imprint of Elsevier,</subfield>
    <subfield code="c">2016.</subfield>
  </datafield>
  <datafield tag="300" ind1=" " ind2=" ">
    <subfield code="a">1 online resource</subfield>
  </datafield>
  <datafield tag="336" ind1=" " ind2=" ">
    <subfield code="a">text</subfield>
    <subfield code="b">txt</subfield>
    <subfield code="2">rdacontent</subfield>
  </datafield>
  <datafield tag="337" ind1=" " ind2=" ">
    <subfield code="a">computer</subfield>
    <subfield code="b">c</subfield>
    <subfield code="2">rdamedia</subfield>
  </datafield>
  <datafield tag="338" ind1=" " ind2=" ">
    <subfield code="a">online resource</subfield>
    <subfield code="b">cr</subfield>
    <subfield code="2">rdacarrier</subfield>
  </datafield>
  <datafield tag="588" ind1="0" ind2=" ">
    <subfield code="a">Online resource; title from digital title page (viewed on January 08, 2016).</subfield>
  </datafield>
  <datafield tag="504" ind1=" " ind2=" ">
    <subfield code="a">Includes bibliographical references and indexes.</subfield>
  </datafield>
  <datafield tag="520" ind1=" " ind2=" ">
    <subfield code="a">This book surveys the problems and challenges confronting digital forensic professionals today, including massive data sets and everchanging technology. You will learn the basics of cryptocurrencies (like Bitcoin) and the artifacts they generate; discover why examination planning matters and how to do it effectively; incorporate behaviorial analysis into your digital forensics examinations; stay updated with the key artifacts created by the latest Mac OS, OS X 10.11, El Capitan. It discusses the threatscapes and challenges facing mobile device forensics, law enforcement, and legal cases; the power of applying electronic discovery workflows to digital forensics; shows the value of and impact of social media forensics. --</subfield>
    <subfield code="c">Edited summary from book.</subfield>
  </datafield>
  <datafield tag="505" ind1="0" ind2=" ">
    <subfield code="a">Cover; Title Page; Copyright Page; Dedication; Contents; List of Contributors; Editor Biography; Biographies; Acknowledgments; Chapter 1 -- The cryptocurrency enigma; Purpose; Introduction; What makes a currency?; Cryptocurrency; Public key encryption basics; Forensic relevance; Bitcoin; History and current context; Bitcoin framework; Blockchain; Wallets and addresses; Transaction; Verification; Mining; Blockchain explorers; Bitcoin protocol; Forensic artifacts; Multibit HD; Blockchain transaction details; Multibit log; The bitcoin protocol in action; Inv packet; Inv packet data.</subfield>
  </datafield>
  <datafield tag="505" ind1="8" ind2=" ">
    <subfield code="a">Getdata packetGetdata packet data; TX packet; TX packet data; Summary; References; Chapter 2 -- The key to forensic success: examination planning is a key determinant of efficient and effective digital forensics; Introduction; The four phases of digital forensics; It is a matter of questions; Investigative questions; Legal questions; Forensic questions; Identification; Classification/individualization; Association; Reconstruction; Forensic questions as a bridge; Developing forensic hypotheses; Knowing how far to go; Starting the plan; How do you know when you are done?</subfield>
  </datafield>
  <datafield tag="505" ind1="8" ind2=" ">
    <subfield code="a">Examination phase -- data extractionThe forensic analysis; The examination planning process; Conclusion; Examination Planning References; Chapter 3 -- Psychological profiling as an investigative tool for digital forensics; Current model; Issues; Volume of data; Lack of context; Accountability; New model; Phases; Classification; Context analysis; Collection; Statistical analysis; Timeline analysis/visualization; Decision/opinion; Limitations; Case studies; Case study 1 -- shaken baby death; Case study 2 -- arson homicide; Case study 3 -- possession of child porn; Conclusions; References.</subfield>
  </datafield>
  <datafield tag="505" ind1="8" ind2=" ">
    <subfield code="a">Chapter 4 -- The intersection between social media, crime, and digital forensics: #WhoDunIt?Introduction; Social media and crime; Social media and digital forensics; Social media evidence on the network; Social media evidence on the physical device; Summary; References; Chapter 5 -- Mobile device forensics: threats, challenges, and future trends; Introduction; The hardware versus software complexity trend; Cloud services and mobile platforms -- inherent vulnerabilities; There is an app for that -- forensic challenges and threats within apps; Social media apps; Native and non-native messaging apps.</subfield>
  </datafield>
  <datafield tag="505" ind1="8" ind2=" ">
    <subfield code="a">Multimedia and VoIP "streaming" appsCloud-based storage apps; Camera-enabled apps; Location data and apps; Geotagging and EXIF data within apps; Persistent threats and challenges -- what lies ahead for mobile device forensics; Data encryption and stronger passwords; "Burner" and Chinese phones; JTAG and Chipoff analysis -- advantages, challenges, and threats; Validation and best practices of mobile forensic tools and methods -- the forensic enigma; Conclusion; References; Chapter 6 -- Digital forensics in an eDiscovery world; Introduction; eDiscovery processes and EDRM; Cat or dog not mouse.</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="0">
    <subfield code="a">Computer crimes</subfield>
    <subfield code="x">Investigation.</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="7">
    <subfield code="a">BUSINESS &amp; ECONOMICS</subfield>
    <subfield code="x">Infrastructure.</subfield>
    <subfield code="2">bisacsh</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="7">
    <subfield code="a">SOCIAL SCIENCE</subfield>
    <subfield code="x">General.</subfield>
    <subfield code="2">bisacsh</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="7">
    <subfield code="a">Computer crimes</subfield>
    <subfield code="x">Investigation.</subfield>
    <subfield code="2">fast</subfield>
    <subfield code="0">(OCoLC)fst00872065</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="7">
    <subfield code="a">Criminology, Penology &amp; Juvenile Delinquency.</subfield>
    <subfield code="2">hilcc</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="7">
    <subfield code="a">Social Welfare &amp; Social Work.</subfield>
    <subfield code="2">hilcc</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="7">
    <subfield code="a">Social Sciences.</subfield>
    <subfield code="2">hilcc</subfield>
  </datafield>
  <datafield tag="655" ind1=" " ind2="4">
    <subfield code="a">Electronic books.</subfield>
  </datafield>
  <datafield tag="776" ind1="0" ind2="8">
    <subfield code="i">Print version:</subfield>
    <subfield code="a">Sammons, John.</subfield>
    <subfield code="t">Digital Forensics.</subfield>
    <subfield code="d">Waltham, MA : Syngress is an imprint of Elsevier, [2016]</subfield>
    <subfield code="z">0128045264</subfield>
    <subfield code="z">9780128045268</subfield>
    <subfield code="w">(OCoLC)921864840</subfield>
  </datafield>
  <datafield tag="856" ind1="4" ind2="0">
    <subfield code="3">ScienceDirect</subfield>
    <subfield code="u">http://www.sciencedirect.com/science/book/9780128045268</subfield>
  </datafield>
  <datafield tag="999" ind1=" " ind2=" ">
    <subfield code="c">247264</subfield>
    <subfield code="d">247264</subfield>
  </datafield>
</record>
