Computer Forensics: Principles and Practices
Linda Volonino, Reynaldo Anzaldua, Jana Godwin, Gary C. Kessler · Medical Entomology and Zoology · 2006
Contents in Brief PART ONE: Admissibility of Electronic Evidence ...1 * Forensic Evidence and Crime Investigation ...3 * Computer Forensics and Digital Detective Work ...38 PART TWO: Preparing for E-Evidence Collection and Preservation ...79 * Tools, Environments, Equipment, and Certifications ...81 * Policies and Procedures...120 * Data, PDA, and Cell Phone Forensics ...157 PART THREE: Forensic Examination of Computers and Digital and Electronic Media ...193 * Operating Systems and Data Transmission Basics for Digital Investigations ...195 * Investigating Windows, Linux, and Graphics Files ...236 * E-Mail and Webmail Forensics ...282 PART FOUR: Detecting Intrusions, Malware, and Fraud ...317 * Internet and Network Forensics and Intrusion Detection ...319 * Tracking Down Those Who Intend to Do Harm on a Large Scale ...348 * Fraud and Forensic Accounting Investigation ...372 PART FIVE: Legal, Ethical, and Testimony Topics...405 * Federal Rules and Criminal Codes ...407 * Ethical and Professional Responsibility in Testimony ...436 Appendix A: Online Resources ...467 Appendix B: Government and Legal References ...472 Appendix C: Sample Legal Forms, Letters, and Motions ...478 Appendix D: Summaries of Court Cases ...504 Glossary ...508 References ...516 Index ...523