Product DescriptionDigital Evidence and Computer Crime Third Edition provides the knowledge necessary to uncover and use digital evidence effectively in any kind of investigation. The widely-adopted first and second editions introduced thousands of students to this field and helped them deal with digital evidence. This completely updated edition provides the introductory materials that new students require and also expands on the material presented in previous editions to help students develop these skills. The textbook teaches how computer networks function how they can be involved in crimes and how they can be used as a source of evidence. Additionally this third edition includes updated chapters dedicated to networked Windows Unix and Macintosh computers and Personal Digital Assistants.
Ancillary materials include an Instructor's Manual and PowerPoint slides.
- Named The 2011 Best Digital Forensics Book by InfoSec Reviews
- Provides a thorough explanation of how computers & networks function how they can be involved in crimes?? and how they can be used as evidence
- Features coverage of the abuse of computer networks and privacy and security issues on computer networks
Amazon.com ReviewPractitioner's Tips from Digital Evidence and Computer Crime's Chapter on Digital Evidence in the Courtroom
- In practice?? many searches are conducted with consent. One of the biggest problems with consensual searches is that digital investigators must cease the search when the owner withdraws consent. However?? digital investigators may be able to use the evidence gathered from a consensual search to establish probable cause and obtain a search warrant.
- Once a search warrant is obtained?? there is generally a limited amount of time to execute the search. Therefore?? it is prudent to obtain a search warrant only after sufficient preparations have been made to perform the search in the allotted time period. Any evidence o"d under an expired search warrant may not be admissible.
- Many digital investigators use the terminology ??is consistent with?? inappropriately to mean that an item of digital evidence might have been due to a certain action or event. For many people?? to say that something is consistent with something else means that the two things are identical?? without any differences. To avoid confusion?? digital investigators are encouraged only to state that something is consistent with something else if the two things are the