Guide to Computer Forensics and Investigations

  • includes DVD
  • AUTHORS: Bill Nelson; Amelia Phillips; Christopher Steuart
  • ISBN-13: 9781285060033 
  • Grade(s): 9 | 10 | 11 | 12
  • 752 Pages  Paperback 
  • 5th Edition  |  Previous Editions: 2010, 2008, 2006
  • ©2016     Published
  • Prices are valid only in the respective region


About The Product

Updated with the latest advances from the field, GUIDE TO COMPUTER FORENSICS AND INVESTIGATIONS, Fifth Edition combines all-encompassing topic coverage, authoritative information from seasoned experts, powerful instructor resources, and real-world student applications-delivering the most comprehensive forensics resource available. This proven author team's wide ranging areas of expertise mirror the breadth of coverage provided in the text, which focuses on techniques and practices for gathering and analyzing evidence used to solve crimes involving computers. While other texts offer more of an overview of the field, this hands-on learning text provides clear instruction on the tools and techniques of the trade, introducing readers to every step of the computer forensics investigation-from lab set-up to testifying in court. It also details step-by-step guidance on how to use current forensics software and provides free demo downloads of popular tools like FTK Imager for use with Case Projects and Hands-On Projects-giving readers the opportunity to put their new skills into action.


  • GUIDE TO COMPUTER FORENSICS AND INVESTIGATIONS explains how to use the most popular forensics tools.
  • Provides specific guidance on dealing with civil and criminal matters relating to the law and technology.
  • Includes discussions on how to manage a digital forensics operation in today’s business environment.
  • Review Questions, Hands-On Projects, and Case Projects that give readers the opportunity to practice skills they have learned.
  • Free software works with running case studies, giving readers the opportunity to test their new skills and tying the content to professional practice.
  • Videos of drive acquisitions and related activities for digital forensics are also included on the DVD.
  • Expansive artwork brings chapter concepts to life. For example, cutaway views of hard drives present a difficult concept like the anatomy of a disk in a way students can fully understand.

About the Contributor

  • Bill Nelson

    Bill Nelson has been a computer forensics examiner for a Fortune 50 company for the past 12 years and has developed high-tech investigation programs for professional organizations and colleges. His previous experience includes AFIS software engineering and reserve police work.

  • Amelia Phillips

    Amelia Phillips is a graduate of the Massachusetts Institute of Technology and has worked for more than 30 years in government, private industry, and academics. She has designed distance education classes and e-commerce, computer forensics, and network security programs at several community colleges. Amelia is Chair of the Pure and Applied Science Division at Highline Community College, a Fulbright Scholar, and a recent PhD in computer security.

  • Christopher Steuart

    Christopher Steuart is one of the founders and the staff attorney for IT Previously, he was an information systems security specialist for a Fortune 50 company and the United States government. Chris resides in Seattle, Washington.

Table of Contents

1. Understanding the Digital Forensics Profession and Investigations.
2. The Investigator’s Office and Laboratory.
3. Data Acquisition.
4. Processing Crime and Incident Scenes.
5. Working with Windows and CLI Systems.
6. Current Computer Forensics Tools.
7. Macintosh and Linux Boot Processes and File Systems.
8. Recovering Graphics Files.
9. Computer Forensics Analysis and Validation.
10. Virtual Machine and Cloud Forensics.
11. Live Acquisitions and Network Forensics.
12. Email investigations.
13. Cell Phone and Mobile Device Forensics.
14. Report Writing for High Tech Investigations.
15. Expert Testimony in High Tech Investigations.
16. Ethics for the Investigator and Expert Witness.
Appendix A Digital Forensics Test References.
Appendix B Digital Forensics References.
Appendix C Digital Forensics Lab Considerations.
Appendix D Digital Forensic Alternative Tools and Methods.

New to this Edition

  • Master the skills needed to launch and conduct a successful digital investigation with the updated fifth edition of this popular book, Guide to Computer Forensics and Investigations: Processing Digital Evidence. This resource guides readers through conducting a high-tech investigation, from acquiring digital evidence to reporting its findings. Updated coverage includes new software and technologies as well as up-to-date reference sections, and content includes how to set up a forensics lab, how to acquire and evaluate the necessary tools, and how to conduct an investigation and subsequent digital analysis. This book features free downloads of the latest forensics software so that readers can become familiar with the tools of the trade.
  • New to This Edition: Updated coverage on Linux and Macintosh, Updated coverage on virtual machine software, such as VMware and Virtual Box, Updated coverage on Android, mobile devices, and handheld devices, Enhanced end-of-chapter exercises

Alternate Formats

Choose the Format that Best Fits Your Student's Budget and Course Goals

  • Book Only
    ISBN-10: 1285060202 | ISBN-13: 9781285060200
    Price = $150.00