Do not forget Brian Carrier's EXCELLENT book, "File System Forensic
Analysis".
This book and "Real Digital Forensics" were VERY HIGHLY recommended by
my mentors...

Chip Meadows, CISA, CISSP, CCSE
"The significant problems we face cannot be solved by the same level of
thinking that created them".....

[ more ]