Computer Forensics: Evidence Collection and Management Book

COMPUTER FORENSIC INVESTIGATION BASICS Computer Forensic Investigation Basics Chapter Objectives Introduction Forensics Defined The Four-Step Process Chapter Summary Terms Review Questions Policies, Standards, Laws, and Legal Processes Chapter Objectives Introduction Laws and Legal Issues Chapter Summary Terms Review Questions Electronic Forensic Examination Categories Chapter Objectives Introduction Chapter Summary Terms Review Questions Computer, Internet, and Electronic Crimes Chapter Objectives Introduction Chapter Summary Terms Review Questions

Computers, Electronics, and Networking Environment Chapter Objectives Introduction Chapter Summary Terms Review Questions Investigative Tools, Technical Training, and Forensic Equipment Chapter Objectives Introduction Chapter Summary Terms Review Questions FORENSIC EVIDENCE COLLECTION AND MANAGEMENT Managing the Crime/Incident Scene Chapter Objectives Introduction Chapter Summary Terms Review Questions

Investigating Computer Center Incidents Chapter Objectives Introduction Chapter Summary Terms Review Questions Computer Systems Disk and File Structures Chapter Objectives Introduction Chapter Summary Terms Review Questions The Computer and Electronic Forensic Lab Chapter Objectives Introduction Chapter Summary Terms Review Questions Extracting Computer and Electronic Evidence Chapter Objectives Introduction Chapter Summary Terms Review Questions E-mail and Internet Investigations Chapter Objectives Introduction Chapter Summary Terms Review Questions Mobile Phone and PDA Investigations Chapter Objectives Introduction Chapter Summary Terms Review Questions Court Preparation, Presentations, and Testimony Chapter Objectives Introduction Chapter Summary Terms Review Questions Appendix A Investigation Forms Examination Forms Appendix B Forensic Cases and Exercises Appendix C Answers to Review Questions Appendix D Binary and Hexadecimal Number Systems