Provides a strong theoretical discussion on forensic concepts and important considerations in a forensic examination
Explains the computer concepts of particular relevance to forensics
Includes a detailed section that describes and discusses important artifacts