Notifications
Clear all

Books...

3 Posts
3 Users
0 Likes
649 Views
(@jonathan)
Posts: 878
Prominent Member
Topic starter
 

In the view of forum members, what is the best (Windows) computer forensic book to be kept as a reference in the office?

 
Posted : 30/06/2005 9:02 am
(@djazz)
Posts: 8
Active Member
 

This one should be your bible:
"File System Forensic Analysis" by Brian Carrier.

there is a thread about this book in an earlier post….

Also very good:

"Windows Forensics and Incident Recovery" by Harlan Carvey
"Digital Evidence and Computer Crime" by Eoghan Casey
"Handbook of Computer Crime Investigation: Forensic Tools & Technology"

 
Posted : 02/07/2005 9:05 am
keydet89
(@keydet89)
Posts: 3568
Famed Member
 

Brian's is an excellent book for file system forensics, explaining the different structures and what they mean.

I wrote my book because there just wasn't anything out there on how to conduct a forensic analysis of a Windows system.

H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com

 
Posted : 02/07/2005 11:18 am
Share: