Computer Forensics: Evidence Collection and Management » (1st Edition)

Computer Forensics: Evidence Collection and Management examines cyber-crime, E-commerce, and Internet activities that could be used to exploit the Internet, computers, and electronic devices. The book focuses on the numerous vulnerabilities and threats that are inherent on the Internet and networking environments and presents techniques and suggestions for corporate security personnel, investigators, and forensic examiners to successfully identify, retrieve, and protect valuable forensic evidence for litigation and prosecution.

The book is divided into two major parts for easy reference. The first part explores various crimes, laws, policies, forensic tools, and the information needed to understand the underlying concepts of computer forensic investigations. The second part presents information relating to crime scene investigations and management, disk and file structure, laboratory construction and functions, and legal testimony. Separate chapters focus on investigations involving computer systems, e-mail, and wireless devices.

Presenting information patterned after technical, legal, and managerial classes held by computer forensic professionals from Cyber Crime Summits held at Kennesaw State University in 2005 and 2006, this book is an invaluable resource for those who want to be both efficient and effective when conducting an investigation.

COMPUTER FORENSIC INVESTIGATION BASICS Computer Forensic Investigation Basics Chapter Objectives Introduction Forensics Defined The Four-Step Process Chapter Summary Terms Review Questions Policies, Standards, Laws, and Legal Processes Chapter Objectives Introduction Laws and Legal Issues Chapter Summary Terms Review Questions Electronic Forensic Examination Categories Chapter Objectives Introduction Chapter Summary Terms Review Questions Computer, Internet, and Electronic Crimes Chapter Objectives Introduction Chapter Summary Terms Review Questions

Computers, Electronics, and Networking Environment Chapter Objectives Introduction Chapter Summary Terms Review Questions Investigative Tools, Technical Training, and Forensic Equipment Chapter Objectives Introduction Chapter Summary Terms Review Questions FORENSIC EVIDENCE COLLECTION AND MANAGEMENT Managing the Crime/Incident Scene Chapter Objectives Introduction Chapter Summary Terms Review Questions

Investigating Computer Center Incidents Chapter Objectives Introduction Chapter Summary Terms Review Questions Computer Systems Disk and File Structures Chapter Objectives Introduction Chapter Summary Terms Review Questions The Computer and Electronic Forensic Lab Chapter Objectives Introduction Chapter Summary Terms Review Questions Extracting Computer and Electronic Evidence Chapter Objectives Introduction Chapter Summary Terms Review Questions E-mail and Internet Investigations Chapter Objectives Introduction Chapter Summary Terms Review Questions Mobile Phone and PDA Investigations Chapter Objectives Introduction Chapter Summary Terms Review Questions Court Preparation, Presentations, and Testimony Chapter Objectives Introduction Chapter Summary Terms Review Questions Appendix A Investigation Forms Examination Forms Appendix B Forensic Cases and Exercises Appendix C Answers to Review Questions Appendix D Binary and Hexadecimal Number Systems