TY  - BOOK
AU  - Nelson,Bill
AU  - Phillips, Amelia 
AU  - Steuart, Christopher 
TI  - Guide to computer forensics and investigations : Processing Digital Evidence
SN  - 9781285060033 (hard copy : alk. paper)
U1  - 005.8 
PY  - 2016///] ©2016
CY  - Boston, MA : 
PB  - Cengage Learning, 
KW  - Computer security.
KW  - Electronic evidence.
KW  - Computer crimes -- Investigation
N1  - Previous edition: 2010.
New to this edition: updated coverage on Linux and Macintosh; updated coverage on virtual machine software, such as VMware and Virtual Box; updated coverage on Android, mobile devices, and heldheld devices; enhanced end-of-chapter exercises.
Accompanying DVD-ROM (in back pocket) contains tutorials, project files and software tools; Understanding the digital forensics profession and investigations --
The investigator's office and laboratory --
Data acquisition --
Processing crime and incident scenes --
Working with Windows and CLI systems --
Current digital forensics tools --
Linux and Macintosh file systems --
Recovering graphics files --
Digital forensics analysis and validation --
Virtual machine forensics, live acquisitions, and network forensics --
E-mail and social media investigations --
Mobile device forensics --
Cloud forensics --
Report writing for high-tech investigations --
Expert testimony in digital investigations --
Ethics for the expert witness
N2  - Combines all-encompassing topic coverage, authoritative information from seasoned experts, powerful instructor resources, and real-world student applications - delivering the comprehensive forensics resource
ER  -