Request for consultation

Thanks for your request. You’ll soon be chatting with a consultant to get the answers you need.
Your form is submitting...
{{formPostErrorMessage.message}} [{{formPostErrorMessage.code}}]
Email Address is required. 'Email Address' must contain at least 0 characters 'Email Address' cannot exceed 0 characters Please enter a valid Email Address
First Name is required. 'First Name' must contain at least 0 characters 'First Name' cannot exceed 0 characters Please enter a valid First Name
Last Name is required. 'Last Name' must contain at least 0 characters 'Last Name' cannot exceed 0 characters Please enter a valid Last Name
Institution is required.
Discipline is required.
Country is required. 'Country' must contain at least 0 characters 'Country' cannot exceed 0 characters Please enter a valid Country
Cengage, at your service! How can we best meet your needs? is required.
Why are you contacting us today? is required. 'Why are you contacting us today?' must contain at least 0 characters 'Why are you contacting us today?' cannot exceed 0 characters Please enter a valid Why are you contacting us today?

Guide to Computer Forensics and Investigations, 7th Edition

Bill Nelson, Amelia Phillips, Christopher Steuart

  • Copyright 2025
  • {{checkPublicationMessage('Published', '2024-04-08T00:00:00+0000')}}
Starting At £53.00 See pricing and ISBN options
Instructor Next Steps
Students: Buy now
Guide to Computer Forensics and Investigations 7th Edition by Bill Nelson/Amelia Phillips/Christopher Steuart
Quick Navigation

Overview

Updated with the latest advances in the field, Nelson/Phillips/Steuart's GUIDE TO COMPUTER FORENSICS AND INVESTIGATIONS, 7th Edition, combines all-encompassing topic coverage, authoritative information from seasoned experts, powerful instructor resources and real-world student applications -- delivering the most comprehensive forensics resource available. The author team's broad range of areas of expertise mirrors the breadth of coverage provided, focusing on techniques and practices for gathering, analyzing and presenting evidence to answer questions about crimes and incidents involving computers and digital devices. GUIDE TO COMPUTER FORENSICS AND INVESTIGATIONS helps students learn digital forensics investigation by providing practical hands-on learning with clear instruction on the tools and techniques used in digital forensics. Students are introduced to every step of the digital forensics investigation process, from lab setup to testifying in court.

{{readMore['overview'] ? 'Read More' : 'Read Less'}}

Meet the Authors

{{collapseContainerClosed['meet-the-author'] ? 'Show More' : 'Show Less'}}

Bill Nelson

Bill Nelson has worked for two global Fortune 100 companies in information technologies for over 32 years, including 18-plus years in corporate digital forensics and information security. In addition, he has taught digital forensics classes at the City University of Seattle and the University of Washington's Professional and Continuing Education Department for 10 years. He also has experience in Automated Fingerprint Identification System software engineering and reserve police work. A former president and vice president for Computer Technology Investigators Northwest, he routinely lectures at several colleges and universities in the Pacific Northwest.

Amelia Phillips

Amelia Phillips is a tenured faculty member at Highline College in Seattle, Washington. After serving as an engineer at the Jet Propulsion Laboratory, she worked with e-commerce websites and began training in computer forensics to prevent credit card numbers from being stolen from sensitive e-commerce databases. Dr. Phillips designed certificate and AAS programs for community colleges in e-commerce, network security, computer forensics and data recovery. She designed the Bachelor of Applied Science in Cybersecurity and Forensics, which was approved in 2014. A Fulbright Scholar, Dr. Phillips taught at Polytechnic of Namibia in 2005 and 2006 and continues her work with developing nations, traveling there frequently. She earned BS degrees in astronautical engineering and archaeology and an MBA in technology management from the Massachusetts Institute of Technology, and an interdisciplinary Ph.D. in computer security from the University of Alaska, Fairbanks.

Christopher Steuart

Christopher K. Steuart is a practicing attorney maintaining a general litigation practice, with experience in information systems security for a Fortune 50 company and the U.S. Army. He is also an honorary life member and the former general counsel for Computer Technology Investigators Northwest. He has presented computer forensics seminars in regional and national forums, including the American Society for Industrial Security, Agora, Northwest Computer Technology Crime Analysis Seminar and CTIN.

What's New

{{collapseContainerClosed['whats-new'] ? 'Show More' : 'Show Less'}}
  • *New* Updated Hands-On Projects provide real-world experience with software that can be downloaded from the Internet as freeware, shareware, or demo versions. Students will be able to explore a variety of ways to acquire and even hide evidence. Accompanying student data files used to complete the activities and projects in the book are available for download on the instructor companion site.
  • Master the skills needed to launch and conduct a successful digital forensics investigation with the updated seventh edition of the popular book, Guide to Computer Forensics and Investigations. This resource guides learners through conducting a digital forensics investigation, from acquiring digital evidence to reporting its findings.
  • Case Projects: Redesigned case projects teach students to effectively and professionally communicate their digital forensic work findings.
  • New Modules: “Internet of Anything and Drone Forensics” and “e-Discovery” are new additions to this textbook.
  • NICE Framework Mapping: For institutions looking to maintain their National Centers of Academic Excellence under the National Security Agency (NCAE) classification, the content is mapped to the National Initiative for Cybersecurity Education (NICE) framework and knowledge units.
  • Updated coverage explores the latest in new software and technologies and up-to-date reference sections. Updated content includes how to set up a forensics lab, acquire and evaluate the necessary tools, acquire and analyze digital evidence and write reports.
  • Lab Manual Exercises: The Lab Manual features in-depth exercises for students who want a greater challenge.
  • Reflections: Refer to MindTap to access the Reflection Assignments, where students write a reflection on what they learned from the module and identify ways to apply their newfound knowledge to their careers.
  • Per Module Release Notes: Each module contains a summary of updates to help instructors revise their lesson plans.
  • Security for Life: Refer to MindTap to access the Security for Life activities, where students can read articles, listen to podcasts and watch videos to stay current with what is happening in the field of digital forensics and build lifelong learning habits.
  • Live Virtual Machine Labs: Refer to MindTap to gain access to the live virtual machine labs. In this online environment, students will access live IT systems in real time so they can troubleshoot, explore and try different solutions in a safe, sandbox environment using real hardware and virtualized operating systems.
  • Live Virtual Machine Labs: Refer to MindTap to gain access to the live virtual machine labs. In this online environment, students will access live IT systems in real time so they can troubleshoot, explore and try different solutions in a safe, sandbox environment using real hardware and virtualized operating systems.

Features

{{collapseContainerClosed['features'] ? 'Show More' : 'Show Less'}}
  • Enhanced end-of-module exercises give students more hands-on applications -- helping them maximize their study time and course success.

Table of Contents

{{collapseContainerClosed['table-of-contents'] ? 'Show More' : 'Show Less'}}
Module 1 Understanding the Digital Forensics Profession and Investigations
Module 2 Report Writing and Testimony for Digital Investigations
Module 3 The Investigator’s Laboratory and Digital Forensics Tools
Module 4 Data Acquisition
Module 5 Processing Crime and Incident Scenes
Module 6 Working with Microsoft File Systems and the Windows Registry
Module 7 Linux and Macintosh File Systems
Module 8 Media Files and Digital Forensics
Module 9 Virtual Machine Forensics and Live Acquisitions Forensics
Module 10 Network Forensics
Module 11 Cloud Forensics and the Internet of Anything
Module 12 Mobile Device Forensics
Module 13 Email and Social Media Investigations
Module 14 e-Discovery
Module 15 Ethics and Professional Responsibilities
Appendix A Certification Testing References
Appendix B Digital Forensics References
Appendix C Digital Forensics Lab Considerations
Appendix D Legacy File Systems
Appendix E NICE Framework and CAE Knowledge Units
Appendix F Shell Command Examples
Glossary

Compare Buying Options

{{collapseContainerClosed['compare-buying-options'] ? 'Show More' : 'Show Less'}}

MindTap Options

{{collapseContainerClosed['detail_1'] ? 'Show More' : 'Show Less'}}
MindTap
Each MindTap product offers the full, mobile-ready textbook combined with superior and proven learning tools at one affordable price. Students who purchase digital access can add a print option at any time when a print option is available for their course.

This Cengage solution can be seamlessly integrated into most Learning Management Systems (Blackboard, Brightspace by D2L, Canvas, Moodle, and more) but does require a different ISBN for access codes. Please work with your Cengage Learning Consultant to ensure the proper course set up and ordering information. For additional information, please visit the LMS Integration site.

Standalone Digital Access — Ultimate Value

Recommended and most popular

  • ISBN-10: 821449298X
  • ISBN-13: 9798214492988
  • RETAIL £137.00
Instructor Next Steps
Students: Buy now

Textbook Only Options

Traditional eBook and Print Options

{{collapseContainerClosed['detail_0'] ? 'Show More' : 'Show Less'}}

  • ISBN-10: 0357673018
  • ISBN-13: 9780357673010
  • RETAIL £53.00

  • ISBN-10: 0357672887
  • ISBN-13: 9780357672884
  • RETAIL £84.99
Instructor Next Steps
Students: Buy now

Supplements

{{collapseContainerClosed['supplements'] ? 'Show More' : 'Show Less'}}

Cengage provides a range of supplements that are updated in coordination with the main title selection. For more information about these supplements, contact your Learning Consultant.

FOR STUDENTS

International MindTap Instant Access for Nelson/Phillips/Steuart's Guide to Computer Forensics and Investigations

ISBN: 9798214492988
International MindTap Instant Access for Nelson/Phillips/Steuart's Guide to Computer Forensics and Investigations, 7th Edition is the digital learning solution that powers students from memorization to mastery. It gives you complete control of your course--to provide engaging content, to challenge every individual, and to build their confidence. Empower students to accelerate their progress with MindTap. MindTap: Powered by You. MindTap gives you complete ownership of your content and learning experience. Customize the interactive syllabi, emphasize the most important topics and add your own material or notes in the ebook. All online text media materials accessible through this access code are available in EMEA, Latin America, Asia, and India only.