Tom's Forensics

Avatar

A Forensics Blog hosted on Google AppEngine.

Learning Computer Forensics

I've been in computers about since they were invented. I've worked as a computer "operator" , programmer and most every other role there is up to Head of Information Systems at two major banks. So forensics is simply a chance to fill in a lot of details I may have previously glossed over and make use of the knowledge in new ways.

I plan to use this blog to document what I learn and how I go about it.

A good friend with similar experience to mine suggested the following 4 books as a primer in the overall field. I've read the first and am working on the second. The links below take you to Amazon with reviews.

1. Computer Forensics, Incident Response Essentials by Warren G. Kruse II and JayG. Heiser. isbn 0-201-70719-5 copyright 2002

2. EnCE, The Official EnCase Certified Examiner Study Guide, by Steve Bunting, isbn 978-0-470--18145-4 copyright 2008

3. File System Forensic Analysis br Brian Carrier, isbn 0-321-26817-2, copyright 2005

4. Windows Forensic Analysis by Harlan Carvey, isbn 978-1-59749-156-3 copyright 2007

At this point I'm not yet ready to provide useful commentary but it will come.