This section concludes with comparative purposes strengths and limitations of each tool. The main Technology section provides the technical "how to" information for collecting and analyzing digital evidence in common situations, starting with the computer, moving to the network, and culminating with embedded systems. Equipment section provides details of the hardware and software leading The main Technology section provides the technical "how to" information to collect and analyze digital evidence in common situations Case examples give readers a sense of technical, legal, and practical challenges that arise in real computer investigations