Guide to Computer Forensics and Investigations, 4th Edition

  • Bill Nelson
  • Amelia Phillips Highline Community College
  • Christopher Steuart
  • ISBN-10: 1435498836
  • ISBN-13: 9781435498839
  • 720 Pages Paperback 
  • Previous Editions: 2008, 2006, 2004
  • © 2010 | Published
  • College Bookstore Wholesale Price = $122.75 
» Request an Online Copy for Review   Why an online review copy?
  • It's the greener, leaner way to review! An online copy cuts down on paper and on time. Reduce the wait (and the weight) of printed texts. Your online copy arrives instantly, and you can review it anytime from your computer or favorite mobile device.

If you prefer a print copy to review, please contact your representative.

 

About The Solution

Overview

Learners will master the skills necessary to launch and complete a successful computer investigation with the updated fourth edition of this popular book, GUIDE TO COMPUTER FORENSICS AND INVESTIGATIONS. This resource guides readers through conducting a high-tech investigation, from acquiring digital evidence to reporting its findings. Updated coverage includes new software and technologies as well as up-to-date reference sections. Learn how to set up a forensics lab, how to acquire the proper and necessary tools, and how to conduct the investigation and subsequent digital analysis. The book features free downloads of the latest forensic software, so readers can become familiar with the tools of the trade.


Features/Benefits

  • STEP-BY-STEP EXPLANATIONS: Provides explanations on how to use the most popular forensic tools.
  • EXPANDED DISCUSSION ON ETHICS, COMPUTER FORENSICS AND THE LAW: Provides specific guidance on dealing with civil and criminal matters relating to the law and technology.
  • COMPUTER FORENSICS OPERATIONS METHODOLOGIES: Discussions on how to manage a corporate computer forensics operation in today's business environment.
  • EXTENSIVE LEARNING TOOLS: Review Questions, Hands-On Projects, and Case Projects that allow readers to practice skills they have learned.
  • FREE SOFTWARE: Free software works with running case studies, giving readers the opportunity to test their new skills and tying the content to professional practice. Videos of drive acquisitions and related activities for computer forensics are also included on the DVD.

What's New

  • Updated to include Vista.
  • Expanded discussion on Microsoft's NTFS and MFT.
  • Advance NTFS data carving techniques.
  • Updated tools and applications references for the computing forensics examiner.
  • Updated reference sections for computing forensics resources.

Best Buy Packages

Other Popular Packages

Choose the textbook packaged with the resources that best meet your course and student needs. Contact your Cengage Learning representative for more information.


Bundle: Text + Web-Based Labs Printed Access Card
ISBN-10: 1111087318  | ISBN-13: 9781111087319
List Price = $202.95  | CengageBrain Price = $161.99  | College Bookstore Wholesale Price = $150.25

This Bundle Includes:

  • Guide to Computer Forensics and Investigations
    List Price = $165.95  | CengageBrain Price = $132.49  | College Bookstore Wholesale Price = $122.75
  • Web-Based Labs Printed Access Card
    List Price = $97.00  | CengageBrain Price = $96.99  | College Bookstore Wholesale Price = $73.25


Bundle: Text + LabConnection Online Printed Access Card for Guide to Computer Forensics and Investigations
ISBN-10:  111186845X  | ISBN-13:  9781111868451
List Price = $173.95  | CengageBrain Price = $138.99  | College Bookstore Wholesale Price = $128.91

This Bundle Includes:

  • Guide to Computer Forensics and Investigations
    List Price = $165.95  | CengageBrain Price = $132.49  | College Bookstore Wholesale Price = $122.75
  • LabConnection Online Printed Access Card for Guide to Computer Forensics and Investigations
    List Price = $64.95  | College Bookstore Wholesale Price = $47.50


ePack: eBook: Guide to Computer Forensics and Investigations, 4th + Web-Based Labs Printed Access Card
ISBN-10:  1285573722  | ISBN-13:  9781285573724
List Price = $140.95  | CengageBrain Price = $140.95  | College Bookstore Wholesale Price = $87.99

This Bundle Includes:

  • eBook: Guide to Computer Forensics and Investigations
    List Price = $49.49  | CengageBrain Price = $49.49  | College Bookstore Wholesale Price = $49.49
  • Web-Based Labs Printed Access Card
    List Price = $97.00  | CengageBrain Price = $96.99  | College Bookstore Wholesale Price = $73.25


Bundle: Guide to Computer Forensics and Investigations, 4th + LabConnection on DVD for Guide to Computer Forensics and Investigations
ISBN-10:  1133500390  | ISBN-13:  9781133500391
List Price = $173.95  | CengageBrain Price = $138.99  | College Bookstore Wholesale Price = $128.75

This Bundle Includes:

  • Guide to Computer Forensics and Investigations
    List Price = $165.95  | CengageBrain Price = $132.49  | College Bookstore Wholesale Price = $122.75
  • LabConnection on DVD for Guide to Computer Forensics and Investigations
    List Price = $73.95  | CengageBrain Price = $58.99  | College Bookstore Wholesale Price = $54.50


ePack: Guide to Computer Forensics and Investigations, 4th + Cengage-Hosted Course360 Computer Forensics Printed Access Card + Lab Manual
ISBN-10:  1285573129  | ISBN-13:  9781285573120
List Price = $162.00  | CengageBrain Price = $162.00  | College Bookstore Wholesale Price = $162.00

This Bundle Includes:

  • Guide to Computer Forensics and Investigations
    List Price = $165.95  | CengageBrain Price = $132.49  | College Bookstore Wholesale Price = $122.75
  • Lab Manual
    List Price = $30.95  | CengageBrain Price = $24.49  | College Bookstore Wholesale Price = $23.00
  • Cengage-Hosted Course360 Computer Forensics Printed Access Card
    List Price = $102.00  | College Bookstore Wholesale Price = $102.00


ePack: Guide to Computer Forensics and Investigations, 4th + Course360 Computer Forensics Printed Access Card + Lab Manual
ISBN-10:  1285573080  | ISBN-13:  9781285573083
List Price = $152.00  | CengageBrain Price = $152.00  | College Bookstore Wholesale Price = $152.00

This Bundle Includes:

  • Guide to Computer Forensics and Investigations
    List Price = $165.95  | CengageBrain Price = $132.49  | College Bookstore Wholesale Price = $122.75
  • Lab Manual
    List Price = $30.95  | CengageBrain Price = $24.49  | College Bookstore Wholesale Price = $23.00
  • Course360 Computer Forensics Printed Access Card
    List Price = $92.00  | College Bookstore Wholesale Price = $92.00


ePack: Text + Web-Based Labs Portal Solution ePins Instant Access Code
ISBN-10:  1285726898 | ISBN-13:  9781285726892
List Price = $202.95  | CengageBrain Price = $161.99  | College Bookstore Wholesale Price = $150.25

This Bundle Includes:

  • Guide to Computer Forensics and Investigations
    List Price = $165.95  | CengageBrain Price = $132.49  | College Bookstore Wholesale Price = $122.75
  • Web-Based Labs Portal Solution ePins Instant Access Code
    List Price = $97.00  | College Bookstore Wholesale Price = $97.00


Table of Contents

1: Computer Forensics and Investigation Processes.
2: Understanding Computing Investigations.
3: The Investigator's Office and Laboratory.
4: Data Acquisitions.
5: Processing Crime and Incident Scenes.
6: Working with Windows and DOS Systems.
7: Current Computer Forensics Tools.
8: Macintosh and Linux Boot Processes and File Systems.
9: Computer Forensics Analysis.
10: Recovering Graphics Files.
11: Virtual Machines, Network Forensics, and Live Acquisitions.
12: E-mail Investigations.
13: Cell Phone and Mobile Device Forensics.
14: Report Writing for High-Tech Investigations.
15: Expert Testimony in High-Tech Investigations.
16: Ethics and High-Tech Investigations.
Appendix A: Certification and Testing Processes for Computer Forensics.
Appendix B: ComputerForensics References.
Appendix C: Computer Forensics Lab Configuration.
Appendix D: DOS-Based Computer Forensics Tools.

Products Included

Instructor Supplements

Instructor Supplements

All supplements have been updated in coordination with the main title. Select the main title’s "About the Solution" tab, then select "What's New" for updates specific to title's edition. For more information about these supplements, or to obtain them, contact your Learning Consultant.

Instructor's Resource CD-ROM  (ISBN-10: 1435498844 | ISBN-13: 9781435498846)

The following supplemental materials are available when this book is used in a classroom setting. All the supplements available with this book are provided to instructors on a single CD, called the Instructor's Resource CD, or online at www.cengage.com/coursetechnology from the Instructor Downloads link on the product page. Electronic Instructor's Manual--The Instructor's Manual that accompanies this book includes additional material to assist in class preparation, including suggestions for classroom activities, discussion topics, and additional activities. Solutions--The instructor's resources include solutions to all end-of-chapter material, including review questions, hands-on activities, and case projects. PowerPoint presentations--This book comes with Microsoft PowerPoint slides for each chapter. They're included as a teaching aid for classroom presentation, to make available to students on the network for chapter review, or to be printed for classroom distribution. Instructors, please feel free to add your own slides for additional topics you introduce to the class. Computerized Testbank - The Computerized Test Bank makes generating tests and quizzes a snap. With hundreds of questions to choose from, you can create customized assessments for your students with the click of a button. You can add your own unique questions and print the rationales for easy class preparation. This is available in ExamView, Blackboard, or WebCT format.


Lab Manual  (ISBN-10: 1435498852 | ISBN-13: 9781435498853)

To ensure a successful experience for instructors and students alike, this book includes the following sections for each lab: Lab Objectives – Every lab has a brief description and list of learning objectives Materials Required – Every lab includes information on the hardware, software, and other materials you need to complete the lab. Estimated Completion Time – Every lab has an estimated completion time, so that you can plan your activities accurately. Activity – The actual lab activity is presented in this section. Logical and precise step-by-step instructions guide you through the lab. Review Questions – Each lab includes follow-up questions to help reinforce concepts presented in the lab.

List Price = $30.95  | CengageBrain Price = $24.49  | College Bookstore Wholesale Price = $23.00


Web-Based Labs Printed Access Card  (ISBN-10: 1435498860 | ISBN-13: 9781435498860)

Web-Based Labs for Computer Forensics and Investigations provides step-by-step labs taken directly from the textbook, Computer Forensics and Investigations. Using a real lab environment over the Internet, students can log on anywhere, anytime via a Web browser to gain essential hands-on experience in computer forensics.

List Price = $97.00  | CengageBrain Price = $96.99  | College Bookstore Wholesale Price = $73.25


LabConnection Instant Access  (ISBN-10: 1133938612 | ISBN-13: 9781133938613)

List Price = $60.00  | CengageBrain Price = $60.00  | College Bookstore Wholesale Price = $60.00


LabConnection on CengageBrain Printed Access  (ISBN-10: 1285777662 | ISBN-13: 9781285777665)

List Price = $61.95  | CengageBrain Price = $61.49  | College Bookstore Wholesale Price = $45.75


LabConnection on DVD for Guide to Computer Forensics and Investigations  (ISBN-10: 1111313180 | ISBN-13: 9781111313180)

With powerful computer-based exercises, lab simulations and in-depth remediation capabilities, LabConnection® provides a uniquely integrated supplement to hands-on networking courses, and can be used both as a virtual lab and homework assignment tool. LabConnection supports Cengage Learning's GUIDE TO COMPUTER FORENSICS AND INVESTIGATIONS, 4e offers remediation to the textbook. LabConnection, by dti Publishing, is a system that enables exercises and labs to be embedded within the curriculum and instruction. The system includes one simulated lab session per chapter of the text, each containing five to seven interactive exercises and one to three end-to-end lab procedures. The standalone DVD version allows use of the simulation product without the necessity of online access. LabConnection is also available as online and institutional versions, with full learning management capabilities.

List Price = $73.95  | CengageBrain Price = $58.99  | College Bookstore Wholesale Price = $54.50


Student Supplements

Student Supplements

All supplements have been updated in coordination with the main title. Select the main title’s "About the Solution" tab, then select "What's New" for updates specific to title's edition. For more information about these supplements, or to obtain them, contact your Learning Consultant.

Lab Manual  (ISBN-10: 1435498852 | ISBN-13: 9781435498853)

To ensure a successful experience for instructors and students alike, this book includes the following sections for each lab: Lab Objectives – Every lab has a brief description and list of learning objectives Materials Required – Every lab includes information on the hardware, software, and other materials you need to complete the lab. Estimated Completion Time – Every lab has an estimated completion time, so that you can plan your activities accurately. Activity – The actual lab activity is presented in this section. Logical and precise step-by-step instructions guide you through the lab. Review Questions – Each lab includes follow-up questions to help reinforce concepts presented in the lab.

List Price = $30.95  | CengageBrain Price = $24.49  | College Bookstore Wholesale Price = $23.00


Web-Based Labs Portal Solution ePins Instant Access Code  (ISBN-10: 0840022131 | ISBN-13: 9780840022134)

List Price = $97.00  | College Bookstore Wholesale Price = $97.00


Web-Based Labs Printed Access Card  (ISBN-10: 1435498860 | ISBN-13: 9781435498860)

WEB-BASED LABS FOR GUIDE TO COMPUTER FORENSICS AND INVESTIGATIONS, FOURTH EDITION provides step-by-step labs taken directly from GUIDE TO COMPUTER FORENSICS AND INVESTIGATIONS, FOURTH EDITION. Using a real lab environment over the Internet, students can log on anywhere, anytime via a Web browser to gain essential hands-on experience in computer forensics.

List Price = $97.00  | CengageBrain Price = $96.99  | College Bookstore Wholesale Price = $73.25


LabConnection Instant Access  (ISBN-10: 1133938612 | ISBN-13: 9781133938613)

List Price = $60.00  | CengageBrain Price = $60.00  | College Bookstore Wholesale Price = $60.00


LabConnection on CengageBrain Printed Access  (ISBN-10: 1285777662 | ISBN-13: 9781285777665)

List Price = $61.95  | CengageBrain Price = $61.49  | College Bookstore Wholesale Price = $45.75


LabConnection on DVD for Guide to Computer Forensics and Investigations  (ISBN-10: 1111313180 | ISBN-13: 9781111313180)

LABCONNECTION ON DVD GUIDE TO COMPUTER FORENSICS AND INVESTIGATIONS has innovative hands-on-tool provides a simulated learning environment for those studying to be Information Security Technicians. The program consists of interactive exercises and end-to-end procedures. SCORM 1.2 generates a personal study plan based on the way the exercises are completed then will highlight the areas in the test that needs review.

List Price = $73.95  | CengageBrain Price = $58.99  | College Bookstore Wholesale Price = $54.50


Meet the Author

About the Author

Bill Nelson

Bill Nelson has been a computer forensics examiner for a Fortune 50 company for the past 12 years and has developed high-tech investigation programs for professional organizations and colleges. His previous experience includes AFIS software engineering and reserve police work.

Amelia Phillips

Amelia Phillips is a graduate of the Massachusetts Institute of Technology and has worked for more than 30 years in government, private industry, and academics. She has designed distance education classes and e-commerce, computer forensics, and network security programs at several community colleges. Amelia is Chair of the Pure and Applied Science Division at Highline Community College, a Fulbright Scholar, and a recent PhD in computer security.

Christopher Steuart

Christopher Steuart is one of the founders and the staff attorney for IT Forensics.com. Previously, he was an information systems security specialist for a Fortune 50 company and the United States government. Chris resides in Seattle, Washington.

Custom

Custom learning materials let you create a digital or print course solution in the style and format best for you and your learners. Maximize engagement and achieve desired outcomes with the aid of our academic and digital experts, who have years of experience helping instructors customize material to specific course needs.
Create your custom solution »