The comprehensive coverage and detailed know-how led he hook beiilisted as recommended read the FBI Forensics Communications, the States Certified reading room from includes how to set csa the necessary to a forensiow to and how to conduct an investigation andsequent analysis.

Master the skills needed to launch aompiete a successful computer investigation with this updated editic uide to Computer Fepensics and nvestigations, Thipd Edition teacles rees how to onduct a high-tech cquiring digence to re ting their findings. Coverage investigation, from includes how to set csa the necessary to a forensiow to and how to conduct an investigation andsequent analysis. The comprehensive coverage and detailed know-how led he hook beilisted as recommended read the FBI Forensics Communications, the Ur ed States Certified reading room. The book features free downloads of several irensics software programs so that students can become familiar with the tool the trad.

PREFACE

INTRODUCTION

CHAPTER ONE

Computer Forensics and Investigations as a Profession

CHAPTER TWO

Understanding Computer Investigations

CHAPTER THREE

The Investigator's Office and Laboratory

CHAPTER FOUR

Data Acquisition

CHAPTER FIVE

Processing Crime and Incident Scenes

CHAPTER SIX

Working with Windows and DOS Systems

CHAPTER SEVEN

Current Computer Forensics Tools

CHAPTER EIGHT

Macintosh and Linux Boot Processes and File Systems

CHAPTER NINE

Computer Forensics Analysis and Validation

CHAPTER TEN

Recovering Graphics Files

CHAPTER ELEVEN

Network Forensics

CHAPTER TWELVE

E-mail Investigations

CHAPTER THIRTEEN

Cell Phone and Mobile Device Forensics

CHAPTER FOURTEEN

Report Writing for High-Tech Investigations

CHAPTER FIFTEEN

Expert Testimony in High-Tech Investigations

CHAPTER SIXTEEN

Ethics for the Expert Witness

APPENDIX A

Certification Test References

APPENDIX B

Computer Forensics References

APPENDIX C

Computer Forensics Lab Considerations

APPENDIX D

DOS File System and Forensics Tools

INDEX