On 1/24/06, Meadows, Chip <[EMAIL PROTECTED]> wrote: > Do not forget Brian Carrier's EXCELLENT book, "File System Forensic > Analysis". > This book and "Real Digital Forensics" were VERY HIGHLY recommended by > my mentors... >
I found the O'Reilly book was good on setting up an Incident Response team versus Forensics work. http://www.oreilly.com/catalog/incidentres/index.html -- Stephen J Smoogen. CSIRT/Linux System Administrator
