Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Advanced Search Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Big Data Forensics: Learning Hadoop Investigations
  • Table Of Contents Toc
  • Feedback & Rating feedback
Big Data Forensics: Learning Hadoop Investigations

Big Data Forensics: Learning Hadoop Investigations

By : Joe Sremack
5 (3)
Buy this Book
close
close
Big Data Forensics: Learning Hadoop Investigations

Big Data Forensics: Learning Hadoop Investigations

5 (3)
By: Joe Sremack
Buy this Book

Overview of this book

Big Data forensics is an important type of digital investigation that involves the identification, collection, and analysis of large-scale Big Data systems. Hadoop is one of the most popular Big Data solutions, and forensically investigating a Hadoop cluster requires specialized tools and techniques. With the explosion of Big Data, forensic investigators need to be prepared to analyze the petabytes of data stored in Hadoop clusters. Understanding Hadoop’s operational structure and performing forensic analysis with court-accepted tools and best practices will help you conduct a successful investigation. Discover how to perform a complete forensic investigation of large-scale Hadoop clusters using the same tools and techniques employed by forensic experts. This book begins by taking you through the process of forensic investigation and the pitfalls to avoid. It will walk you through Hadoop's internals and architecture, and you will discover what types of information Hadoop stores and how to access that data. You will learn to identify Big Data evidence using techniques to survey a live system and interview witnesses. After setting up your own Hadoop system, you will collect evidence using techniques such as forensic imaging and application-based extractions. You will analyze Hadoop evidence using advanced tools and techniques to uncover events and statistical information. Finally, data visualization and evidence presentation techniques are covered to help you properly communicate your findings to any audience.
Table of Contents (10 chapters)
close
close
close
Preface
chevron up
Icon
Preface
Icon
What this book covers
Icon
What you need for this book
Icon
Who this book is for
Icon
Conventions
Icon
Reader feedback
Icon
Customer support
Free Chapter
1
1. Starting Out with Forensic Investigations and Big Data
Icon
1. Starting Out with Forensic Investigations and Big Data
Icon
An overview of computer forensics
Icon
What is Big Data?
Icon
Big Data forensics
Icon
Summary
2
2. Understanding Hadoop Internals and Architecture
Icon
2. Understanding Hadoop Internals and Architecture
Icon
The Hadoop architecture
Icon
Hadoop data analysis tools
Icon
Managing files in Hadoop
Icon
The Hadoop forensic evidence ecosystem
Icon
Running Hadoop
Icon
Summary
3
3. Identifying Big Data Evidence
Icon
3. Identifying Big Data Evidence
Icon
Identifying evidence
Icon
Locating sources of data
Icon
The chain of custody documentation
Icon
Summary
4
4. Collecting Hadoop Distributed File System Data
Icon
4. Collecting Hadoop Distributed File System Data
Icon
Forensically collecting a cluster system
Icon
Physical versus remote collections
Icon
HDFS collections through the host operating system
Icon
The Hadoop shell command collection
Icon
Collection via Sqoop
Icon
Other HDFS collection approaches
Icon
Summary
5
5. Collecting Hadoop Application Data
Icon
5. Collecting Hadoop Application Data
Icon
Application collection approaches
Icon
Validating application collections
Icon
Collecting Hive evidence
Icon
Collecting HBase evidence
Icon
Collecting other Hadoop application data and non-Hadoop data
Icon
Summary
6
6. Performing Hadoop Distributed File System Analysis
Icon
6. Performing Hadoop Distributed File System Analysis
Icon
The forensic analysis process
Icon
Analysis preparation
Icon
Analysis
Icon
Summary
7
7. Analyzing Hadoop Application Data
Icon
7. Analyzing Hadoop Application Data
Icon
Preparing the analysis environment
Icon
Pre-analysis steps
Icon
Analyzing data
Icon
Summary
8
8. Presenting Forensic Findings
Icon
8. Presenting Forensic Findings
Icon
Types of reports
Icon
Developing the report
Icon
Testimony and other presentations
Icon
Summary
9
Index
Icon
Index

Customer support

Now that you are the proud owner of a Packt book, we have a number of things to help you to get the most from your purchase.

Downloading the color images of this book

We also provide you a PDF file that has color images of the screenshots/diagrams used in this book. The color images will help you better understand the changes in the output. You can download this file from: http://www.packtpub.com/sites/default/files/downloads/8104OS_ColorImages.pdf.

Errata

Although we have taken every care to ensure the accuracy of our content, mistakes do happen. If you find a mistake in one of our books—maybe a mistake in the text or the code—we would be grateful if you would report this to us. By doing so, you can save other readers from frustration and help us improve subsequent versions of this book. If you find any errata, please report them by visiting http://www.packtpub.com/submit-errata, selecting your book, clicking on the errata submission form link, and entering the details of your errata. Once your errata are verified, your submission will be accepted and the errata will be uploaded on our website, or added to any list of existing errata, under the Errata section of that title. Any existing errata can be viewed by selecting your title from http://www.packtpub.com/support.

Piracy

Piracy of copyright material on the Internet is an ongoing problem across all media. At Packt, we take the protection of our copyright and licenses very seriously. If you come across any illegal copies of our works, in any form, on the Internet, please provide us with the location address or website name immediately so that we can pursue a remedy.

Please contact us at with a link to the suspected pirated material.

We appreciate your help in protecting our authors, and our ability to bring you valuable content.

Questions

You can contact us at if you are having a problem with any aspect of the book, and we will do our best to address it.

Unlock full access

Continue reading for free

A Packt free trial gives you instant online access to our library of over 7000 practical eBooks and videos, constantly updated with the latest in tech
Start a 7-day FREE trial
Next Chapter

Create a Note

Modal Close icon
You need to login to use this feature.
notes
bookmark search playlist font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete

Delete Note

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY