Guide to computer forensics and investigations : processing digital evidence / Bill Nelson, Amelia Phillips, Christopher Steuart.

Material de apoyo Departamento de Seguridad Cibernética y de la Información.

Preface, xv -- Introduction, xvii -- Chapter 1. Understanding the digital forensics profession and investigations, 1 -- Chapter 2. The investigator's office and laboratory, 63 -- Chapter 3. Data acquisition, 89 -- Chapter 4. Processing crime and incident scenes, 135 -- Chapter 5. Working with windows and CLI systems, 183 -- Chapter 6. Current digital forensics tools, 251 -- Chapter 7. Linux and macintosh file systems, 285 -- Chapter 8. Recovering graphics files, 317 -- Chapter 9. Digital forensics analysis and validation, 359 -- Chapter 10. Virtual machine forensics, live acquisitions, and network forensics, 389 -- Chapter 11. E-mail and social media investigations, 423 -- Chapter 12. Mobile device forensics, 457 -- Chapter 13. Cloud forensics, 481 -- Chapter 14. Report writing for high-tech investigations, 511 Chapter 15. Expert testimony in digital investigations, 535 -- Chapter 16. Ethics for the expert witness, 567 -- Appendix A. Certification test references, 599 -- Appendix B. Digital Forensics references, 603 -- Appendix C. Digital Forensics lab considerations, 609 -- Appendix D. DOS files system and forensics tools, 615 -- Glossary, 623 -- Index, 633.