Includes bibliographical references and index.

pt. 1. What is digital forensics? Digital evidence is everywhere ; Overview of digital forensics ; Digital forensics : the subdisciplines ; The foundations of digital forensics : best practices ; Overview of digital forensics tools ; Digital forensics at work in the legal system -- pt. 2. Experts. Why do I need an expert? ; The difference between computer experts and digital forensics experts ; Selecting a digital forensics expert ; What to expect from an expert ; Approaches by different types of examiners ; Spotting a problem expert ; Qualifying an expert in court -- pt. 3. Motions and discovery. Overview of digital evidence discovery ; Discovery of digital evidence in criminal cases ; Discovery of digital evidence in civil cases ; Discovery of computers and storage media ; Discovery of video evidence ; Discovery of audio evidence ; Discovery of social media evidence ; Discovery in child pornography cases ; Discovery of internet service provider records ; Discovery of global positioning system evidence ; Discovery of call detail records ; Obtaining expert funding in indigent cases -- pt. 4. Common types of digital evidence. Hash values : the verification standard ; Metadata ; Thumbnails and the thumbnail cache ; Deleted data ; Computer time artifacts (MAC times) ; Internet history (web and browser caching) ; Windows shortcut files (link files) ; Cellular system evidence and call detail records ; E-mail evidence ; Social media ; Peer-to-peer networks and file sharing ; Cell phones ; Video and photo evidence ; Databases ; Accounting systems and financial software ; Multiplayer online games ; Global positioning systems.