Integrating Python with Leading Computer Forensics Platforms

Integrating Python with Leading Computer Forensic Platforms takes a definitive look at how and why the integration of Python advances the field of digital forensics. In addition, the book includes practical, never seen Python examples that can be immediately put to use. Noted author Chet Hosmer demonstrates how to extend four key Forensic Platforms using Python, including EnCase by Guidance Software, MPE+ by AccessData, The Open Source Autopsy/SleuthKit by Brian Carrier and WetStone Technologies, and Live Acquisition and Triage Tool US-LATT. This book is for practitioners, forensic investigators, educators, students, private investigators, or anyone advancing digital forensics for investigating cybercrime.

Additionally, the open source availability of the examples allows for sharing and growth within the industry. This book is the first to provide details on how to directly integrate Python into key forensic platforms.

Chapter 1: Integrating Python With Forensics Platforms

Chapter 2: Key Python Language Elements for Forensics

Chapter 3: Integrating Python With MPE+

Chapter 4: Integrating Python With EnCase/EnScripts

Chapter 5: Integrating Python With Leading Forensic Platforms

Chapter 6: Integrating Python With Leading Forensic Platforms

Chapter 7: Future Look and an Integration Challenge Problem

Digital forensic professionals and analysts, information security professionals, researchers, and practitioners, legal professionals, law enforcement officers, as well as students in digital forensics criminal justice programs at university.

• Provides hands-on tools, code samples, detailed instruction, and documentation that can be immediately put to use
• Shows how to integrate Python with popular digital forensic platforms, including EnCase, MPE+, The Open Source Autopsy/SleuthKit, and US-LATT
• Presents complete coverage of how to use Open Source Python scripts to extend and modify popular digital forensic Platforms