Michael G. Solomon & K Rudolph 
Computer Forensics JumpStart [PDF ebook] 

Introduction.
Chapter 1 The Need for Computer Forensics.
Chapter 2 Preparation–What to Do Before You Start.
Chapter 3 Computer Evidence.
Chapter 4 Common Tasks.
Chapter 5 Capturing the Data Image.
Chapter 6 Extracting Information from Data.
Chapter 7 Passwords and Encryption.
Chapter 8 Common Forensic Tools.
Chapter 9 Pulling It All Together.
Chapter 10 How to Testify in Court.
Appendix A Answers to Review Questions.
Appendix B Forensic Resources.
Appendix C Forensic Certifications and More.
Appendix D Forensic Tools 289
Glossary.
Index.

Michael G. Solomon, CISM, CISSP, PMP, GSEC, is a full-time
security speaker, consultant, trainer, and project manager who
specializes in development and assessment security topics. An IT
professional since 1987, he has worked on projects or done training
for more than 60 major companies and organizations, including
Earth Link, Schumacher, Nike, and others.
K Rudolph, CISSP, is founder and President of Native
Intelligence, which provides security training for federal agencies
and commercial firms. She is a featured speaker at national
conferences and a board member of Federal Information Systems
Security Educators’ Association.
Ed Tittel is a 28-year computer industry veteran with
over 130 books to his credit. He writes regularly for sites such as
Inform IT.com and Tech Target.
Neil Broom, CCE, CISSP, CFE, is President and Laboratory
Director of Technical Resource Center, Inc. in Atlanta, Georgia. He
has more than 15 years of experience providing investigative,
technical, educational, and security services.
Diane Barrett is a forensic trainer for Paraben. Holding
many industry certifications including CISSP, ISSMP, and DCFP, she
has been involved in the IT industry for almost 20 years and has
been active in education, security, and forensics for the past 10
years.