File System Forensic Analysis
ISBN:9780321268174 read summary

If you do forensics analysis you need to have this handy at all times, it is the bar-none authority with an endless amount of crucial detail that even the most experienced examiner can't possibly memorize.

This book just recently celebrated it's fifth year of being in print and it still is one of the finest digital forensic books available today. The book is something that should be in every digital forensic examiner's library. The fact that the SANS Institute provides it as part of their SEC508 Computer Forensic Investigations and Incident Response course materials speaks volumes about how great it is even after so much time has passed.

I purchased the kindle version of this book. The content of this book is great. The kindle version content page does not work. You can not select a chapter from the index and go directly to it. I also found at least one 2 page chart that is not useable on the kindle. The 2 page chart should be reduced to a 1 page image that can be viewed in landscape mode (with the kindle on its side). If the kindle version is fixed, it would then deserve 5 stars!

I am takeing two on line courses in computer forensics and this is the text required for the course. I have been very happy with the book "File System Forensic Analsys" and would highly recommend it to any person of like interest. Dale

I believe that anyone that is entering the Computer Forensics field should have this book. It is THE reference book that I have found.