Guide to Computer Forensics and Investigations

Authors : Bill Nelson; Amelia Phillips; Christopher Steuart

9781435498839

720 Pages Paperback

4th Edition | Previous Editions: 2008, 2006, 2004

$174.00

Request Print Sample Buy

Learn More

Learners will master the skills necessary to launch and complete a successful computer investigation with the updated fourth edition of this popular book, GUIDE TO COMPUTER FORENSICS AND INVESTIGATIONS. This resource guides readers through conducting a high-tech investigation, from acquiring digital... more

Features

STEP-BY-STEP EXPLANATIONS: Provides explanations on how to use the most popular forensic tools.

EXPANDED DISCUSSION ON ETHICS, COMPUTER FORENSICS AND THE LAW: Provides specific guidance on dealing with civil and criminal matters relating to the law and technology.

COMPUTER FORENSICS OPERATIONS MET... more

New to this Edition

Updated to include Vista.

Expanded discussion on Microsoft's NTFS and MFT.

Advance NTFS data carving techniques.

Updated tools and applications references for the computing forensics examiner.

Updated reference sections for computing forensics resources.

Authors

Bill Nelson

Bill Nelson has worked for two global Fortune 100 companies in information technologies for over 32 years, including 18-plus years in corporate digital forensics and information security. In addition, he has taught digital forensics classes at the City University of Seattle and the University of Washington's Professional and Continuing Education Department for 10 years. He also has experience in Automated Fingerprint Identification System software engineering and reserve police work. A former president and vice president for Computer Technology Investigators Northwest, he routinely lectures at several colleges and universities in the Pacific Northwest.

...more
Amelia Phillips

Amelia Phillips is a tenured faculty member at Highline College in Seattle, Washington. After serving as an engineer at the Jet Propulsion Laboratory, she worked with e-commerce websites and began training in computer forensics to prevent credit card numbers from being stolen from sensitive e-commerce databases. Dr. Phillips designed certificate and AAS programs for community colleges in e-commerce, network security, computer forensics and data recovery. She designed the Bachelor of Applied Science in Cybersecurity and Forensics, which was approved in 2014. A Fulbright Scholar, Dr. Phillips taught at Polytechnic of Namibia in 2005 and 2006 and continues her work with developing nations, traveling there frequently. She earned BS degrees in astronautical engineering and archaeology and an MBA in technology management from the Massachusetts Institute of Technology, and an interdisciplinary Ph.D. in computer security from the University of Alaska, Fairbanks.

...more
Christopher Steuart

Christopher K. Steuart is a practicing attorney maintaining a general litigation practice, with experience in information systems security for a Fortune 50 company and the U.S. Army. He is also an honorary life member and the former general counsel for Computer Technology Investigators Northwest. He has presented computer forensics seminars in regional and national forums, including the American Society for Industrial Security, Agora, Northwest Computer Technology Crime Analysis Seminar and CTIN.

...more

Table of Contents

1: Computer Forensics and Investigation Processes.
2: Understanding Computing Investigations.
3: The Investigator's Office and Laboratory.
4: Data Acquisitions.
5: Processing Crime and Incident Scenes.
6: Working with Windows and DOS Systems.
7: Current Computer Forensics Tools.
8: Macintosh and Linux Boot Processes and File Systems.
9: Computer Forensics Analysis.
10: Recovering Graphics Files.
11: Virtual Machines, Network Forensics, and Live Acquisitions.
12: E-mail Investigations.
13: Cell Phone and Mobile Device Forensics.
14: Report Writing for High-Tech Investigations.
15: Expert Testimony in High-Tech Investigations.
16: Ethics and High-Tech Investigations.
Appendix A: Certification and Testing Processes for Computer Forensics.
Appendix B: ComputerForensics References.
Appendix C: Computer Forensics Lab Configuration.
Appendix D: DOS-Based Computer Forensics Tools.

...more