Guide to Computer Forensics and Investigations (with DVD) / Edition 5

by Bill Nelson, Amelia Phillips, Christopher Steuart

Overview

Updated with the latest advances from the field, GUIDE TO COMPUTER FORENSICS AND INVESTIGATIONS, Fifth Edition combines all-encompassing topic coverage, authoritative information from seasoned experts, and real-world applications to deliver the most comprehensive forensics resource available. This proven author team's wide ranging areas of expertise mirror the breadth of coverage provided in the book, which focuses on techniques and practices for gathering and analyzing evidence used to solve crimes involving computers. While other books offer more of an overview of the field, this hands-on learning text provides clear instruction on the tools and techniques of the trade, introducing readers to every step of the computer forensics investigation-from lab set-up to testifying in court. It also details step-by-step guidance on how to use current forensics software and provides free demo downloads. Appropriate for learners new to the field, it is also an excellent refresher and technology update for professionals in law enforcement, investigations, or computer security.

Product Details

ISBN-13:	9781285060033
Publisher:	Cengage Learning
Publication date:	01/15/2015
Series:	MindTap Course List
Edition description:	Older Edition
Pages:	752
Product dimensions:	7.30(w) x 8.90(h) x 1.70(d)

About the Author

Bill Nelson has worked for two global Fortune 100 companies in information technologies for over 32 years, including 18-plus years in corporate digital forensics and information security. In addition, he has taught digital forensics classes at the City University of Seattle and the University of Washington's Professional and Continuing Education Department for 10 years. He also has experience in Automated Fingerprint Identification System software engineering and reserve police work. A former president and vice president for Computer Technology Investigators Northwest, he routinely lectures at several colleges and universities in the Pacific Northwest.

Amelia Phillips is a tenured faculty member at Highline College in Seattle, Washington. After serving as an engineer at the Jet Propulsion Laboratory, she worked with e-commerce websites and began training in computer forensics to prevent credit card numbers from being stolen from sensitive e-commerce databases. Dr. Phillips designed certificate and AAS programs for community colleges in e-commerce, network security, computer forensics and data recovery. She designed the Bachelor of Applied Science in Cybersecurity and Forensics, which was approved in 2014. A Fulbright Scholar, Dr. Phillips taught at Polytechnic of Namibia in 2005 and 2006 and continues her work with developing nations, traveling there frequently. She earned BS degrees in astronautical engineering and archaeology and an MBA in technology management from the Massachusetts Institute of Technology, and an interdisciplinary Ph.D. in computer security from the University of Alaska, Fairbanks.

Christopher K. Steuart is a practicing attorney maintaining a general litigation practice, with experience in information systems security for a Fortune 50 company and the U.S. Army. He is also an honorary life member and the former general counsel for Computer Technology Investigators Northwest. He has presented computer forensics seminars in regional and national forums, including the American Society for Industrial Security, Agora, Northwest Computer Technology Crime Analysis Seminar and CTIN.

Table of Contents

1. Understanding the Digital Forensics Profession and Investigations. 2. The Investigator’s Office and Laboratory. 3. Data Acquisition. 4. Processing Crime and Incident Scenes. 5. Working with Windows and CLI Systems. 6. Current Computer Forensics Tools. 7. Macintosh and Linux Boot Processes and File Systems. 8. Recovering Graphics Files. 9. Computer Forensics Analysis and Validation. 10. Virtual Machine and Cloud Forensics. 11. Live Acquisitions and Network Forensics. 12. Email investigations. 13. Cell Phone and Mobile Device Forensics. 14. Report Writing for High Tech Investigations. 15. Expert Testimony in High Tech Investigations. 16. Ethics for the Investigator and Expert Witness. Appendix A Digital Forensics Test References. Appendix B Digital Forensics References. Appendix C Digital Forensics Lab Considerations. Appendix D Digital Forensic Alternative Tools and Methods.

Editorial Reviews

"The level of detail for the many topics covered is very good. Complete information is given, including exactly what should be done." Marsha Powell Instructor Tompkins-Cortland Community College

"[The text contains] lots of practical information including little details that give life to the procedures. Students are attracted by these glimpses of the real-world." —Dean Farwood, Heald College

From the Publisher