EnCase Computer Forensics

Steve Bunting, EnCE, CCFT, is a Captain with the University of Delaware Police Department where he is responsible for computer forensics, video forensics, and investigations involving computers. With over 30 years of experience in law enforcement, Steve has conducted computer forensic examinations for local, state, and federal agencies and has testified in court on numerous occasions as a computer forensics expert. He is coauthor of Mastering Windows Network Forensics and Investigation (Sybex).

Introduction. Assessment Test. Chapter 1: Computer Hardware. Chapter 2: File Systems. Chapter 3: First Response. Chapter 4: Acquiring Digital Evidence. Chapter 5: EnCase Concepts. Chapter 6: EnCase Environment. Chapter 7: Understanding, Searching For, and Bookmarking Data. Chapter 8: File Signature Analysis and Hash Analysis. Chapter 9: Windows Operating System Artifacts. Chapter 10: Advanced EnCase. Appendix A: Creating Paperless Reports. Appendix B: About the Companion DVD. Glossary. Index.