Computer Forensics: Principles and Practices

For introductory and intermediate courses in computer forensics, digital investigations, or computer crime investigation

 

By applying information systems, computer security, and criminal justice principles and practices to crime investigations and other legal actions, this text teaches students how to use forensically-sound methodologies and software to acquire admissible electronic evidence (e-evidence) with coverage of computer and email forensics, cell phone and IM forensics, and PDA and Blackberry forensics.   

Contents in Brief

 

PART ONE: Admissibility of Electronic Evidence ........................1

1. Forensic Evidence and Crime Investigation ......................................3
2. Computer Forensics and Digital Detective Work ..............................38

 

PART TWO: Preparing for E-Evidence Collection

and Preservation ....................................................................79

1. Tools, Environments, Equipment, and Certifications ..........................81
2. Policies and Procedures..............................................................120
3. Data, PDA, and Cell Phone Forensics ..........................................157

 

PART THREE: Forensic Examination of Computers

and Digital and Electronic Media ......................................193

1. Operating Systems and Data Transmission Basics for Digital

Investigations ............................................................................195

1. Investigating Windows, Linux, and Graphics Files ........................236
2. E-Mail and Webmail Forensics ....................................................282

 

PART FOUR: Detecting Intrusions, Malware, and Fraud ........317

1. Internet and Network Forensics and Intrusion Detection ..................319
2. Tracking Down Those Who Intend to Do Harm on a Large Scale ....348
3. Fraud and Forensic Accounting Investigation ................................372

 

PART FIVE: Legal, Ethical, and Testimony Topics....................405

1. Federal Rules and Criminal Codes ..............................................407
2. Ethical and Professional Responsibility in Testimony ......................436

 

Appendix A: Online Resources ....................................................467

Appendix B: Government and Legal References ..............................472

Appendix C: Sample Legal Forms, Letters, and Motions ....................478

Appendix D: Summaries of Court Cases ........................................504

Glossary ..................................................................................508

References ................................................................................516

Index ......................................................................................523