Digital evidence and computer crime : forensic science, computers and the Internet / by Eoghan Casey ; with contributions from Susan W. Brenner ... [et al.].

CONTENTS

Foundations of digital forensics
digital evidence
increasing awareness of digital evidence
digital forensics: past, present and future
e.tc

Language of computer crimes
language of computer crime investigation
the role of computers in crime
summary

Digital evidence in the courtroom
duty of experts
admissibility
levels of certainty forensics
e.tc

Cybercrime law: a United States perspective
federal cybercrime law
state cybercrime law
constitutional law
e.tc

Cybercrime law: a European perspective
the European and national legal frameworks
progression of cybercrime legislation in Europe
specific cybercrime offences
e.tc

Conducting digital investigations
digital investigation process models
scaffolding for digital investigations
applying the scientific investigations
e.tc

Handling a digital crime scene
published guidelines for handling digital scenes
fundamental principles
authorization
e.tc

Investigative reconstruction with digital evidence
equivocal forensic analysis
victimology
crime scene characteristics
threshold assessments
summary

Modus operandi, motive, and technology
axes to pathological criminals and other unintended consequences
modus operandi
etc

Violent crime and digital evidence
the role of computers in violet crime
processing the digital crime scene
investigative reconstruction
conclusions

Digital evidence as alibi
investigating an Alibi
time as Alibi
Location as Alibi
e.tc

Sex offenders on the Internet
old behaviours, new medium
legal considerations
identifying and processing digital evidence
e.tc

Computer intrusions
how computer intruders operate
investigating computer intrusions
e.tc

Cyberstalking
how cyberstalkers operate
investigating cyberstalking
cyberstalking case example
summary

Computer basics for digital investigators
a brief history of computers
basic operation of computers
representation of data
e.tc

Applying forensic science to computers
preparation
survey
documentation
preservation
e.tc

Digital evidence on Windows systems
file systems
data recovery
log files
registry
e.tc

Digital evidence on UNIX systems
UNIX evidence acquisition book disk
file systems
overview of digital evidence processing tools
e.tc

Digital evidence on Macintosh systems
file systems
overview of digital evidence processing tools
data recovery
e.tc

Digital evidence on mobile devices

Network basics for digital investigators
a brief history of computer networks
technical overview of networks
e.tc

Applying forensic science to networks
preparation and authorization
identification
documentation, collection and preservation
e.tc

Digital evidence on the Internet
role of the internet in criminal investigations
internet services: legitimate versus criminal uses
using the internet as an investigative tool
e.tc

Digital evidence on physical and data-link layers
ethernet
linking the data and network layers: encapsulation
ethernet versus ATM networks
e.tc

Digital evidence at the network and transport layers.
TCP/IP
Setting up a network
e.tc

Includes bibliographical references and indexes P. 771-807