Request for consultation

Thanks for your request. You’ll soon be chatting with a consultant to get the answers you need.
{{formPostErrorMessage.message}} [{{formPostErrorMessage.code}}]
First Name is required. 'First Name' must contain at least 0 characters 'First Name' cannot exceed 0 characters Please enter a valid First Name
Last Name is required. 'Last Name' must contain at least 0 characters 'Last Name' cannot exceed 0 characters Please enter a valid Last Name
Institution is required.
Discipline is required.
Why are you contacting us today? is required. 'Why are you contacting us today?' must contain at least 0 characters 'Why are you contacting us today?' cannot exceed 0 characters Please enter a valid Why are you contacting us today?

Guide to Computer Forensics and Investigations 4th Edition

Bill Nelson, Amelia Phillips, Christopher Steuart

  • Published
  • Previous Editions 2008, 2006, 2004
  • 720 Pages
Starting At 70.00 See pricing and ISBN options


Learners will master the skills necessary to launch and complete a successful computer investigation with the updated fourth edition of this popular book, GUIDE TO COMPUTER FORENSICS AND INVESTIGATIONS. This resource guides readers through conducting a high-tech investigation, from acquiring digital evidence to reporting its findings. Updated coverage includes new software and technologies as well as up-to-date reference sections. Learn how to set up a forensics lab, how to acquire the proper and necessary tools, and how to conduct the investigation and subsequent digital analysis. The book features free downloads of the latest forensic software, so readers can become familiar with the tools of the trade.

Bill Nelson,

Bill Nelson has been a computer forensics examiner for a Fortune 50 company for the past 12 years and has developed high-tech investigation programs for professional organizations and colleges. His previous experience includes AFIS software engineering and reserve police work.

Amelia Phillips, Highline Community College

Amelia Phillips is a graduate of the Massachusetts Institute of Technology and has worked for more than 30 years in government, private industry, and academics. She has designed distance education classes and e-commerce, computer forensics, and network security programs at several community colleges. Amelia is Chair of the Pure and Applied Science Division at Highline Community College, a Fulbright Scholar, and a recent PhD in computer security.

Christopher Steuart,

Christopher Steuart is one of the founders and the staff attorney for IT Previously, he was an information systems security specialist for a Fortune 50 company and the United States government. Chris resides in Seattle, Washington.
  • Updated to include Vista.
  • Expanded discussion on Microsoft's NTFS and MFT.
  • Advance NTFS data carving techniques.
  • Updated tools and applications references for the computing forensics examiner.
  • Updated reference sections for computing forensics resources.
  • FREE SOFTWARE: Free software works with running case studies, giving readers the opportunity to test their new skills and tying the content to professional practice. Videos of drive acquisitions and related activities for computer forensics are also included on the DVD.
  • STEP-BY-STEP EXPLANATIONS: Provides explanations on how to use the most popular forensic tools.
  • EXPANDED DISCUSSION ON ETHICS, COMPUTER FORENSICS AND THE LAW: Provides specific guidance on dealing with civil and criminal matters relating to the law and technology.
  • COMPUTER FORENSICS OPERATIONS METHODOLOGIES: Discussions on how to manage a corporate computer forensics operation in today's business environment.
  • EXTENSIVE LEARNING TOOLS: Review Questions, Hands-On Projects, and Case Projects that allow readers to practice skills they have learned.
1: Computer Forensics and Investigation Processes.
2: Understanding Computing Investigations.
3: The Investigator's Office and Laboratory.
4: Data Acquisitions.
5: Processing Crime and Incident Scenes.
6: Working with Windows and DOS Systems.
7: Current Computer Forensics Tools.
8: Macintosh and Linux Boot Processes and File Systems.
9: Computer Forensics Analysis.
10: Recovering Graphics Files.
11: Virtual Machines, Network Forensics, and Live Acquisitions.
12: E-mail Investigations.
13: Cell Phone and Mobile Device Forensics.
14: Report Writing for High-Tech Investigations.
15: Expert Testimony in High-Tech Investigations.
16: Ethics and High-Tech Investigations.
Appendix A: Certification and Testing Processes for Computer Forensics.
Appendix B: ComputerForensics References.
Appendix C: Computer Forensics Lab Configuration.
Appendix D: DOS-Based Computer Forensics Tools.

  • ISBN-10: 1305211693
  • ISBN-13: 9781305211698
  • Bookstore Wholesale Price $70.00
  • RETAIL $70.00

  • ISBN-10: 1133938612
  • ISBN-13: 9781133938613
  • Bookstore Wholesale Price $70.00
  • RETAIL $70.00

Textbook Only Options

Traditional eBook and Print Options

{{collapseContainerClosed['detail_0'] ? 'Show More' : 'Show Less'}}

  • ISBN-10: 113347702X
  • ISBN-13: 9781133477020
  • STARTING AT $18.99

  • STARTING AT $31.49

  • ISBN-10: 1435498836
  • ISBN-13: 9781435498839
  • Bookstore Wholesale Price $150.00
  • RETAIL $199.95

Cengage provides a range of supplements that are updated in coordination with the main title selection. For more information about these supplements, contact your Learning Consultant.


Lab Manual

ISBN: 9781285079080
The Laboratory Manual is a valuable tool designed to enhance your lab experience. Lab activities, objectives, materials lists, step-by-step procedures, illustrations, and review questions are commonly found in a Lab Manual.

LabConnection on DVD

ISBN: 9781285060132
With powerful computer-based exercises, lab simulations and in-depth remediation capabilities, LabConnection® provides a uniquely integrated supplement to hands-on networking courses, and can be used both as a virtual lab and homework assignment tool. LabConnection supports Cengage Learning’s GUIDE TO COMPUTER FORENSICS AND INVESTIGATIONS, 5e offers remediation to the textbook. LabConnection is a system that enables exercises and labs to be embedded within the curriculum and instruction. The system includes one simulated lab session per chapter of the text, each containing five to seven interactive exercises and one to three end-to-end lab procedures. The standalone DVD version allows use of the simulation product without the necessity of online access. LabConnection is also available as online and institutional versions, with full learning management capabilities.

Online Instructor's Resource Guide

ISBN: 9781305086630
Everything you need for your course in one place! This collection of book-specific lecture and class tools is available online via Access and download the workbook answer keys.

Cengage Learning Testing, powered by Cognero Instant Access

ISBN: 9781285981000
Cengage Learning Testing Powered by Cognero is a flexible, online system that allows you to: author, edit, and manage test bank content from multiple Cengage Learning solutions create multiple test versions in an instant deliver tests from your LMS, your classroom or wherever you want Start right away! Cengage Learning Testing Powered by Cognero works on any operating system or browser. No special installs or downloads needed Create tests from school, home, the coffee shop – anywhere with Internet access What will you find? Simplicity at every step. A desktop-inspired interface features drop-down menus and familiar, intuitive tools that take you through content creation and management with ease. Full-featured test generator. Create ideal assessments with your choice of 15 question types (including true/false, multiple choice, opinion scale/likert, and essay). Multi-language support, an equation editor and unlimited metadata help ensure your tests are complete and compliant. Cross-compatible capability. Import and export content into other systems.


LabConnection on DVD

ISBN: 9781285060132
LABCONNECTION ON DVD GUIDE TO COMPUTER FORENSICS AND INVESTIGATIONS has innovative hands-on-tool provides a simulated learning environment for those studying to be Information Security Technicians. The program consists of interactive exercises and end-to-end procedures.