Digital Investigations: The Forensic Process and Examination of Digital Evidence focuses on the examination phase of a digital investigation. It reviews the technical skills of digital forensics and how to locate and acquire forensic artifacts on Windows systems, emails and file systems. The book also covers critical skills lacking in other works, including how to handle a digital crime scene and the forensic process for computer systems. In addition, it answers what to do and how to handle gathered evidence during investigations. The text includes labs to teach technical skills, such as data recovery, evidence identification, forensic timelines, etc.

Digital forensics is a crucial science. We are currently at the point where we use technology to support our lifestyle. Soon we will enter an age where technology supplements it. An age where our car will send us an email to remind us it has checked our calendar and booked an oil change at a shop a mile from our house. Where we can view a webcam on our phones to see that grandma is ringing the doorbell.