I would also agree Jumpstart is very very basic and I would not recommend it. There are so many books out there and I think that most of us have a lot of them but this is one I would leave out.
I think any book on the subject, if written by someone in "the know"
will have its pro's as well as con's. As long as the information contained in the book is not incorrect, then it boils down to writing styles and how the information is presented.
Those with more experience will be better equipped to point out any
discrepencies but again, my feeling is that as long as the information, techniques and methods are correctly presented then a read is pretty subjective.
I got half way through the sample chapter and actually liked the way the author steps through the investigation….maybe because I'm fairly new to learning the discipline.
I'll probably pick up RDF….
Andrew-
One book I've found very useful is 'File System Forensic Analysis' by Brian Carrier. A bit on the heavy side but very good.
Also 'Computer Forensic Essentials' was a good read as background before I got my current job.
If you really want to go back to basics then 'Forensic Computer A Practitioner's Guide' is a good read but it was published in 2000 so don't expect any cutting edge information!
This book? http//
One book I've found very useful is 'File System Forensic Analysis' by Brian Carrier. A bit on the heavy side but very good…If you really want to go back to basics then 'Forensic Computer A Practitioner's Guide' is a good read
Couldn't agree more. The best two "foundational" books on the market IMHO.
Jamie
Hi,
I have read 'File System Forensic Analysis' by Brian Carrier and it was very helpful with understanding file system. a little deep, but if you want good technical referece it is invaluable. I am currently doing the CCE online class and it has been helpful.