In this chapter, well cover the following recipes:

• Identifying evidence sources
• Acquiring digital evidence
• Ensuring evidence is forensically sound
• Writing reports
• Digital forensic investigation: an international field
• Challenges of acquiring digital evidence from Windows systems