Discover how to perform a complete forensic investigation of large-scale Hadoop clusters using the same tools and techniques employed by forensic experts. This book begins by taking you through the process of forensic investigation and the pitfalls to avoid.
It will walk you through Hadoop’s internals and architecture, and you will discover what types of information Hadoop stores and how to access that data. After setting up your own Hadoop system, you will collect evidence using techniques such as forensic imaging and application-based extractions.
Finally, data visualization and evidence presentation techniques are covered to help you properly communicate your findings to any audience.