The Jones/Bejtlich book is pretty good: http://www.amazon.com/Real-Digital-Forensics-Computer-Security/dp/0321240693 http://www.amazon.com/Real-Digital-Forensic

The Jones/Bejtlich book is pretty good: http://www.amazon.com/Real-Digital-Forensics-Computer-Security/dp/0321240693 http://www.amazon.com/Real-Digital-Forensics-Computer-Securi... I'm biased on this one, and it's a little outdated, but Mandia's book is pretty good too: http://www.amazon.com/Incident-Response-Computer-Forensics-Second/dp/007222696X http://www.amazon.com/Incident-Response-Computer-Forensics-S...