Includes bibliographical references (pages 645-663) and indexes.

Digital evidence and computer crime -- History and terminology of computer crime investigation -- Technology and law -- The investigative process -- Investigative reconstruction -- Modus operandi, motive and technology -- Digital evidence in the courtroom -- Computer basics for digital investigators -- Applying forensic science to computers -- Forensic examination of Windows systems -- Forensic examination of Unix systems -- Forensic examination of Macintosh systems -- Forensic examination of handheld devices -- Network basics for digital investigators -- Applying forensic science to networks -- Digital evidence on physical and data-link layers -- Digital evidence at the network and transport layers -- Digital evidence on the Internet -- Investigating computer intrusions -- Sex offenders on the Internet -- Investigations cyberstalking -- Digital evidence as alibi -- Digital evidence handling guidelines -- Digital evidence examination guidelines.