In the view of forum members, what is the best (Windows) computer forensic book to be kept as a reference in the office?
This one should be your bible:
"File System Forensic Analysis" by Brian Carrier.
there is a thread about this book in an earlier post….
Also very good:
"Windows Forensics and Incident Recovery" by Harlan Carvey
"Digital Evidence and Computer Crime" by Eoghan Casey
"Handbook of Computer Crime Investigation: Forensic Tools & Technology"
Brian's is an excellent book for file system forensics, explaining the different structures and what they mean.
I wrote my book because there just wasn't anything out there on how to conduct a forensic analysis of a Windows system.
H. Carvey
"Windows Forensics and Incident Recovery"