On 1/24/06, Meadows, Chip <chip.meadows (at) usaa (dot) com [email concealed]> wrote:
> Do not forget Brian Carrier's EXCELLENT book, "File System Forensic
> Analysis".
> This book and "Real Digital Forensics" were VERY HIGHLY recommended by
> my mentors...
>

I found the O'Reilly book was good on setting up an Incident Response
team versus Forensics work.

http://www.oreilly.com/catalog/incidentres/index.html

--
Stephen J Smoogen.
CSIRT/Linux System Administrator

[ reply ]