Digital Forensic Evidence Examination focuses on the scientific basis for analysis, interpretation, attribution, and reconstruction of digital forensic evidence in a legal context.
It defines the bounds of "Information Physics" as it affects digital forensics and introduces a new model of the overall processes associated with the use of such evidence in legal matters. It then reviews and discusses analysis, interpretation, attribution, and reconstruction issues, discusses tools and methodologies and their limits, and adds a short perspective for the future.
The extended table of contents provides a detailed breakdown of the coverage.
This book is now in use for classes including:
University of Pretoria, Honors (students with a BS degree) course in Computer Science department.
UC Santa Cruz, graduate course in digital forensics in the Computer Science department.