The Basics of Digital Forensics: The Primer for Getting Started in Digital Forensics, Second Edition

The Basics of Digital Forensics provides a foundation for people new to the digital forensics field. This book teaches you how to conduct examinations by discussing what digital forensics is, the methodologies used, key tactical concepts, and the tools needed to perform examinations. Details on digital forensics for computers, networks, cell phones, GPS, the cloud and the Internet are discussed. Also, learn how to collect evidence, document the scene, and how deleted data can be recovered.

The new Second Edition of this book provides you with completely up-to-date real-world examples and all the key technologies used in digital forensics, as well as new coverage of network intrusion response, how hard drives are organized, and electronic discovery. You'll also learn how to incorporate quality assurance into an investigation, how to prioritize evidence items to examine (triage), case processing, and what goes into making an expert witness.

The Second Edition also features expanded resources and references, including online resources that keep you current, sample legal documents, and suggested further reading.

• Learn what Digital Forensics entails
• Build a toolkit and prepare an investigative plan
• Understand the common artifacts to look for in an exam
• Second Edition features all-new coverage of hard drives, triage, network intrusion response, and electronic discovery; as well as updated case studies, expert interviews, and expanded resources and references

About the Author

John Sammons is an Assistant Professor at Marshall University in Huntington, West Virginia. John teaches digital forensics, electronic discovery, information security and technology in the Department of Integrated Science and Technology. He is also the founder and Director of the Appalachian Institute of Digital Evidence. AIDE is a non-profit organization that provides research and training for digital evidence professionals including attorneys, judges, law enforcement and information security practitioners in the private sector.

John co-authored the digital forensics chapter in Douglas Ubelaker's book "Forensic Science: Current Issues, Future Directions." The book is co-published with the American Academy of Forensic Sciences.

Prior to joining the faculty at Marshall, John co-founded Second Creek Technologies, a digital forensics and electronic discovery firm. While at Second Creek, John served as the Managing Partner and CEO.

John is a contract instructor for AccessData and is certified by them as both an instructor and examiner.

He is a former Huntington Police officer and currently serves as an investigator for the Cabell County (WV) Prosecutor's Office. John is a member of the FBI's West Virginia Cybercrime Task Force.

John routinely provides training for the legal and law enforcement communities in the areas of digital forensics and electronic discovery.

He is an Associate Member of the American Academy of Forensic Sciences, the High Technology Crime Investigation Association, the Southern Criminal Justice Association and Infragard.