Despite a publication date five years ago, best source I have

I took a graduate class in Digital Forensics and aside from the main textbook (Guide to Computer Forensics and Investigations by Nelson et al), there was also another book, Mastering Windows' Network Forensics and Investigation (Anson et al) since the class tended to focus on Windows OSs. I was trying to wade through the former book's explanation on NTFS filesystems and gave up. I turned to Carrier's book, a backup resource book I purchased. Carrier's explanation of NTFS filesystems is absolutely excellent and his writing style has a clarity not found in other textbooks. I was able to readily absorb and understand his version of NTFS where I was scratching my head with the assigned text. This is no small feat especially given that I am a female reader. I sometimes encounter problems with the way teaching styles vary between the sexes. You won't be missing too much reading this book (for academic purposes) since understanding the basic principles is important. There is a list of references used for each chapter which is nice in case you want to check them out for research paper purposes. Recommend.

Other Reviews

• Despite a publication date five years ago, best source I have
• The authoritative file system reference
• Still one of the best digital forensics books available
• Kindle version
• Computer Forensics