Notifications
Clear all

Books...  

  RSS
Jonathan
(@jonathan)
Senior Member

In the view of forum members, what is the best (Windows) computer forensic book to be kept as a reference in the office?

Quote
Posted : 30/06/2005 10:02 am
Djazz
(@djazz)
New Member

This one should be your bible:
"File System Forensic Analysis" by Brian Carrier.

there is a thread about this book in an earlier post….

Also very good:

"Windows Forensics and Incident Recovery" by Harlan Carvey
"Digital Evidence and Computer Crime" by Eoghan Casey
"Handbook of Computer Crime Investigation: Forensic Tools & Technology"

ReplyQuote
Posted : 02/07/2005 10:05 am
keydet89
(@keydet89)
Community Legend

Brian's is an excellent book for file system forensics, explaining the different structures and what they mean.

I wrote my book because there just wasn't anything out there on how to conduct a forensic analysis of a Windows system.

H. Carvey
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com

ReplyQuote
Posted : 02/07/2005 12:18 pm
Share: