Hacking exposed computer forensics - Philipp, Aaron (McGraw-Hill/Osborne, 2010)