Incident Response: Computer Forensics Toolkit [With CDROM]

by Douglas Schweitzer

* Incident response and forensic investigation are the processes of detecting attacks and properly extracting evidence to report the crime and conduct audits to prevent future attacks * This... This description may be from another edition of this product.

• Format: Paperback
• Language: English
• ISBN: 0764526367
• ISBN13: 9780764526367
• Release Date: May 2003
• Publisher: Wiley
• Length: 345 Pages
• Weight: 1.26 lbs.
• Dimensions: 0.8" x 7.4" x 9.2"

Customer Reviews

Timely and worthwhile!

This book gives the reader a solid grounding in a difficult field. Since forensics and response are an area where you're up against a creative enemy, it's impossible to give the reader a cookbook approach. Schweitzer gives the reader the tools and framework necessary to begin tackling this very difficult problem. I'm really happy to see this book available on the market, since the problem it addresses is one that's getting worse all the time and shows no sign of getting better soon.Good job, Doug!mjr.

Right on the button

A well considered and well structured work for the IT professional. The book is fast paced and wisely does not get dragged down with too much detail and 'how to' guides. It provided the knowledge and check lists to enable the reader to react appropriatly to an IT emergency or situation where a forensic approach is required.It's clear structure will enable me to use the book as a reference work in the future.The included CDROM was useful although in the future a PDF guide of each file would have been handy reference. It would have also been nice to have seen the free tools mentioned in the book included on the disk.Overall an excellent read I will look out for Douglas Schweitzer books again.

Excellent Book on the Subject of Computer Incident Response

Incident Response is a must-read book for anyone who has to handle computer security incidents. It is written in an easy-to-read format that even those new to the subject can follow, while providing enough depth and detail to be valuable as a reference book for experienced professionals. The appendix on the provisions of the USA PATRIOT Act and its impact on information security along with the CD containing many useful freeware and trialware software programs are worth the cost of the book in and of themselves. If you are in a position where you need to know how to respond when a computer incident occurs, or if you just want to learn more about this subject this book is a great place to start.

Necessary, timely, and on the mark. A must have book.

Once again, author Douglas Schweitzer takes his candid no-nonsense approach to security issues. Intrusion is at an all time high and finding the right answers can be elusive. That is what gives significant value to this book. It is Concise and pertinent to the issue at hand.

AWESOME WORK...ONCE AGAIN

Mr Schweitzer has hit the nail on the head once again! The subject matter is extremely timely and accurate. This book is a must have for any network administrator as well as a small business with stand alone PCs. You never know what your employees are doing with their computers. I found the book extremely helpful and easy to read. It provides the technical guidance without being too over technical. Also, the added free resources that are provided pay for the book.