MTU Library Catalogue

Syndetics cover image
Image from Syndetics

Guide to computer forensics and investigations / Amelia Philips, Bill Nelson and Chris Steuart.

By: Philips, Amelia.
Contributor(s): Nelson, Bill (Computer forensics examiner) | Steuart, Christopher.
Material type: materialTypeLabelBookPublisher: Boston : Cengage Learning, 2009Edition: 4th ed.Description: xxv, 682 p. : ill. ; 24 cm.ISBN: 1435498836; 9781435498839.Subject(s): Computer security | Computer crimes -- InvestigationDDC classification: 005.8
Contents:
Computer forensics and investigations as a profession -- Understanding computer investigations -- The investigator's office and laboratory -- Data acquisition -- Processing crime and incident scenes -- Working with windows and DOS systems -- Current computer forensics tools -- Macintosh and Linux boot processes and file systems -- Computer forensics analysis and validation -- Recovering graphics files -- Virtual machines, network forensics and live acquisitions -- E-mail investigations -- Cell phone and mobile device forensics -- Report writing for high-tech investigations -- Expert Testimony in High-Tech Investigations -- Ethics for the expert witness.

Enhanced descriptions from Syndetics:

Master the skills necessary to launch and complete a successful computer investigation with the updated fourth edition of this popular book, GUIDE TO COMPUTER FORENSICS AND INVESTIGATIONS. This resource guides readers through conducting a high-tech investigation, from acquiring digital evidence to reporting its findings. Updated coverage includes new software and technologies as well as up-to-date reference sections, and content includes how to set up a forensics lab, how to acquire the proper and necessary tools, and how to conduct the investigation and subsequent digital analysis. It is appropriate for students new to the field, or as a refresher and technology update for professionals in law enforcement, investigations, or computer security. The book features free downloads of the latest forensic software, so readers can become familiar with the tools of the trade.

Includes bibliographical references and index.

Computer forensics and investigations as a profession -- Understanding computer investigations -- The investigator's office and laboratory -- Data acquisition -- Processing crime and incident scenes -- Working with windows and DOS systems -- Current computer forensics tools -- Macintosh and Linux boot processes and file systems -- Computer forensics analysis and validation -- Recovering graphics files -- Virtual machines, network forensics and live acquisitions -- E-mail investigations -- Cell phone and mobile device forensics -- Report writing for high-tech investigations -- Expert Testimony in High-Tech Investigations -- Ethics for the expert witness.

Table of contents provided by Syndetics

  • 1 Computer Forensics and Investigation Processes
  • 2 Understanding Computing Investigations
  • 3 The Investigator's Office and Laboratory
  • 4 Data Acquisitions
  • 5 Processing Crime and Incident Scenes
  • 6 Working with Windows and DOS Systems
  • 7 Current Computer Forensics Tools
  • 8 Macintosh and Linux Boot Processes and File Systems
  • 9 Computer Forensics Analysis
  • 10 Recovering Graphics Files
  • 11 Virtual Machines, Network Forensics, and Live Acquisitions
  • 12 E-mail Investigations
  • 13 Cell Phone and Mobile Device Forensics
  • 14 Report Writing for High-Tech Investigations
  • 15 Expert Testimony in High-Tech Investigations
  • 16 Ethics and High-Tech Investigations
  • Appendix A Certification and Testing Processes for Computer Forensics
  • Appendix B Computer Forensics References
  • Appendix C Computer Forensics Lab Configuration
  • Appendix D DOS-Based Computer Forensics Tools