Investigating Data and Image Files provides a basic understanding of steganography, data acquisition and duplication, encase, how to recover deleted files and partitions and image file forensics.
Chapter 1, Steganography, provides the history and classifications of steganography, explains the difference between steganography and cryptography as well as the essentials of stego-forensics and watermarking.
Chapter 2, Data Acquisition and Duplication, focuses on how to determine the best data acquisition method, how to make sure crucial data is not lost, and the importance of data duplication. A description of the tools used for data acquisition and duplication is also included.
Chapter 3, Forensic Investigation Using EnCase, includes coverage of this forensic software suite and how investigators can use EnCase to perform different forensic tasks.
Chapter 4, Recovering Deleted Files and Deleted Partitions, covers deleting files and the recycling bin as well as file recovery and deleting and recovering partitions.
Chapter 5, Image File Forensics, covers the various methods that can be used to recover graphics files. It also highlights the various image recovery, steganalysis, and viewing tools that are used and the salient features of these tools