Cisco Router And Switch Forensics: Investigating And Analyzing Malicious Network Activity
by Jesse Varsalone /
2009 / English / PDF
9.8 MB Download
Investigators must recover data as it is transferred via the router or switch, because it is destroyed when the network device is powered down. In this case, following the traditional approach outlined in books on general computer forensics techniques is not only insufficient, but also essentially harmful to an investigation. Jargon buster: A network switch is a small hardware device that joins multiple computers together within one local area network (LAN). A router is a more sophisticated network device that joins multiple wired or wireless networks together.-
