There are a variety of hardware and software products on the market, built specifically for digital forensic investigators, to aid in the investigative process. There are also a large number of open-source tools, freely available to download, and of course open for contribution. Depending on your situation, you might be able to obtain the most expensive tools, or you might not. Regardless of the tools in your arsenal, one thing is for sure: you have to know what they can and cannot do in a given forensics scenario. You also have to become intimately familiar with how the tools function, and what is occurring behind the scenes when a forensic tool processes evidence on your behalf. In explaining why this is important, ...

Get Hands-on Incident Response and Digital Forensics now with the O’Reilly learning platform.

O’Reilly members experience live online training, plus books, videos, and digital content from nearly 200 publishers.