Computer Forensics: Incident Response Essential- 0201707195, paperback, Kruse II A nice touch in this textbook is the summary boxes at the end of every section.
