Search icon
Arrow left icon
All Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Newsletters
Free Learning
Arrow right icon
Cloud Forensics Demystified

You're reading from  Cloud Forensics Demystified

Product type Book
Published in Feb 2024
Publisher Packt
ISBN-13 9781800564411
Pages 384 pages
Edition 1st Edition
Languages
Concepts
Authors (2):
Ganesh Ramakrishnan Ganesh Ramakrishnan
Profile icon Ganesh Ramakrishnan
Mansoor Haqanee Mansoor Haqanee
Profile icon Mansoor Haqanee
View More author details

Table of Contents (18) Chapters

Preface 1. Part 1: Cloud Fundamentals
2. Chapter 1: Introduction to the Cloud 3. Chapter 2: Trends in Cyber and Privacy Laws and Their Impact on DFIR 4. Chapter 3: Exploring the Major Cloud Providers 5. Chapter 4: DFIR Investigations – Logs in AWS 6. Part 2: Forensic Readiness: Tools, Techniques, and Preparation for Cloud Forensics
7. Chapter 5: DFIR Investigations – Logs in Azure 8. Chapter 6: DFIR Investigations – Logs in GCP 9. Chapter 7: Cloud Productivity Suites 10. Part 3: Cloud Forensic Analysis – Responding to an Incident in the Cloud
11. Chapter 8: The Digital Forensics and Incident Response Process 12. Chapter 9: Common Attack Vectors and TTPs 13. Chapter 10: Cloud Evidence Acquisition 14. Chapter 11: Analyzing Compromised Containers 15. Chapter 12: Analyzing Compromised Cloud Productivity Suites 16. Index 17. Other Books You May Enjoy

Conventions used

There are a number of text conventions used throughout this book.

Code in text: Indicates code words in text, database table names, folder names, filenames, file extensions, pathnames, dummy URLs, user input, and Twitter handles. Here is an example: “Commands such as sort by and limit control the order and the number of records in the output.”

A block of code is set as follows:

AzureNetworkAnalytics_CL
| where SubType_s == "FlowLog"
| extend FlowDirection = iff(FlowDirection_s == 'O', 'Outbound', 'Inbound')
| extend AllowedOrDenied = iff(FlowStatus_s == 'A', 'Allowed', 'Denied')

When we wish to draw your attention to a particular part of a code block, the relevant lines or items are set in bold:

StorageBlobLogs
| where TimeGenerated > ago(7d)
| project TimeGenerated, OperationName, AuthenticationType, Uri, _ResourceId, CallerIpAddress

Any command-line input or output is written as follows:

$ gsutil iam get gs://test_cf1_test1

Bold: Indicates a new term, an important word, or words that you see on screen. For instance, words in menus or dialog boxes appear in bold. Here is an example: “All virtual networks can be accessed directly from the Virtual networks service on Azure’s Home page.”

Tips or important notes

Appear like this.

lock icon The rest of the chapter is locked
Next Chapter arrow right
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $15.99/month. Cancel anytime}