I am a retired federal agent (IRS-CID) looking to start a "computer forensics" branch of my current business. What books would you recommend for a beginner with a little knowledge? And which books ought I consider after achieving a basic knowledge set?
My end state goal is to be proficient in securing admissable evidence, find information residing in the computer, trace Email, discover hidden "robot" command lines, etc.
Books to get you started from what "little knowledge"? How much do you know about operating systems and hardware? Do you need starting from A+ knowledge or do you already have extensive computer knowledge? What is your current business that you are trying to enhance?
Really need a lot more info to be helpful.
If you scroll down the page, look on the left column under Resources and there is a link for books on forensics, however that may not be what you are looking for.
It's not something you can read a few books and then market yourself as an expert. Many people find that they will get to a point where they can make images and then send the images out to other experts. Junior type examiners, etc.
There are plenty of topics on how someone should get started, book recommendations, class recommendations, software recommendations.
I'm not allowed to tell you where to look for the information at, as we were told not to do that, but as a former CID AND an PI, you should know at least one popular search engine which can help, as well as a feature of this forum which rhymes with lurch or terch.
If you start today, you can probably take your first case in 3-4 years as in lots of peoples opinions that is what it would take to properly provide the acceptable level of knowledge to your client.
Bithead My computer knowledge consist of a basic knowledge of DOS, and some experience working with FTK. I am looking for a book that is more comprehensive than Forensics for Dummies but not anything near a PHd submissionl
Forensicakb If my post caused you alarm that yet another potential "expert" is out there poaching business you need not be concerned. My goal is to gain guidance from those who know and might be willing to point me in the right direction.
Computer Forensics Library Boxed Set can be found on a few sites including Amazon. I would say that Carrier's book in that box set is the most important read.
allend Thank you! Ordered via Amazon.