Cyber Forensics Field Guide Essay

Cover art courtesy of Greg Kipper.

Library of Congress Cataloging-in-Publication Data
Middleton, Bruce. Cyber crime investigator’s field guide / Bruce Middleton. p. cm. Includes index. ISBN 0-8493-1192-6 (alk. paper) 1. Computer crimes—Investigation—Handbooks, manuals, etc. I. Title. HV8079.C65 M53 2001 363.25′968—dc21

2001037869 CIP

This book contains information obtained from authentic and highly regarded sources. Reprinted material is quoted with permission, and sources are indicated. A wide variety of references are listed. Reasonable efforts have been made to publish reliable data and information, but the author and the publisher cannot assume responsibility for the validity of all materials or for the consequences of their use. Neither this book nor any part may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, microfilming, and recording, or by any information storage or retrieval system, without prior permission in writing from the publisher. The consent of CRC Press LLC does not extend to copying for general distribution, for promotion, for creating new works, or for resale. Specific permission must be obtained in writing from CRC Press LLC for such copying. Direct all inquiries to CRC Press LLC, 2000 N.W. Corporate Blvd., Boca Raton, Florida 33431. Trademark Notice: Product or corporate names may be trademarks or registered trademarks, and are used only for identification and explanation, without intent to infringe.

Visit the Auerbach Publications Web site at www.auerbach-publications.com
© 2002 by CRC Press LLC Auerbach is an imprint of CRC Press LLC No claim to original U.S. Government works International Standard Book Number 0-8493-1192-6 Library of Congress Card Number 2001037869 Printed in the United States of America 1 2 3 4 5 6 7 8 9 0 Printed on acid-free paper

Contents

1 The Initial Contact 2 Client Site Arrival 3 Evidence Collection Procedures
Detailed Procedures for...