Learn how to:

• Implement a computer forensics incident-response strategy
• Lead a successful investigation from the initial response to completion
• Conduct disk-based analysis and recover deleted files
• Identify information-hiding techniques
• Reconstruct user activity from e-mail, temporary Internet files and cached data
• Assess the integrity of system memory and process architecture to reveal malicious code

Includes a CD-ROM with the most recent computer case studies, exercises forensics sites, and software that was written specifically for forensic examiners

Instructor support materials includes a CD with additional case studies, questions and answers, and PowerPoint presentations for use as a textbook