Computer Forensics: Evidence Collection & Management
Robert C. Newman - Presenting background information in computer and information systems and their use in the cyber environment. Supplies information needed to collect and preserve electronic evidence from an individual computer, a network, a telephone system, or personal electronic device that will stand up in a court of law. Includes checklists on how evidence should be handled as well as policies and recommendations for the frequency of protocol evaluations.