Computer forensics cannot be divorced from the law. A computer forensics investigator needs knowledge of the law to effectively do his or her job. Meanwhile, legal professionals working on cybercrimes must have knowledge of the hardware, software, and technology involved in computer forensics to effectively do their jobs.
This definitive textbook is written for students in computer forensics courses and covers core topics, including defining the different types of cybercrime, conducting an investigation, the process of retrieving and analyzing digital evidence, network forensics, laws relevant to electronic evidence, and many more. It is also ideal for students in legal courses who are seeking an introduction to the technology involved in computer forensics investigations and the technical and legal difficulties involved in searching, extracting, maintaining, and storing electronic evidence, while simultaneously looking at the legal implications of such investigations and the rules of legal procedure relevant to electronic evidence.
