Digital Investigations: The Forensic Process and Examination of Digital Evidence

Digital Investigations: The Forensic Process and Examination of Digital Evidencefocuses on the examination phase of a digital investigation. It reviews the technical skills of digital forensics and how to locate and acquire forensic artifacts on Windows systems, emails and file systems. The book also covers critical skills lacking in other works, including how to handle a digital crime scene and the forensic process for computer systems. In addition, it answers what to do and how to handle gathered evidence during investigations. The text includes labs to teach technical skills, such as data recovery, evidence identification, forensic timelines, etc.

Digital forensics is a crucial science. We are currently at the point where we use technology to support our lifestyle. Soon we will enter an age where technology supplements it. An age where our car will send us an email to remind us it has checked our calendar and booked an oil change at a shop a mile from our house. Where we can view a webcam on our phones to see that grandma is ringing the doorbell.

• Provides an overview of the tools and techniques experts in the field of computer crime need in digital forensics
• Includes steps on how to handle a scene, identify/acquire/preserve evidence and disk and data recovery
• Presents the terminology and tools involved in digital investigations, how to conduct examinations, specifically in Windows systems, and in email