Computer Forensic Examiner – Quick Reference Guide Revision 2.3
The latest edition of the Computer Forensic Examiner Quick Reference Guide, revision 2.3.
A 52 page, pocket sized guide containing charts for file systems, Windows artifacts and more. A sample of the guide content is available for preview:
CF Quick Ref Guide v2.3 (10.3 MiB)
Please note: This item is currently available for purchase and immediate dispatch from Amazon. The button below will redirect you to the corresponding item on Amazon.com. The message below stating this item is out of stock, refers only to stock on this website. Please visit Amazon for stock levels. Thank you 🙂
The guide is C6 paper size, portrait and spiral bound on the short edge. The individual pages are laminated for durability. Content wise, it has 12 pages of NTFS including a breakdown of commonly encountered $MFT attributes. There are 3 pages dedicated to FAT including short and long filename breakdowns. exFAT, HFS+ and Ext2/3/4 file systems have been added, spanning 9 pages. The following Windows artifacts have been included: Windows Registry, Internet Explorer, and various Windows Artifacts (total of 11 pages) as well as a page on dates and times and file signatures. ASCII table complete with conversions to Decimal, Hexadecimal, Octal and Binary. The back page has the IACIS first responder guide for handling electronic evidence.
Computer Forensic Examiner – Quick Reference Guide Revision 2.2
The Computer Forensic Examiner Quick Reference Guide, revision 2.2.
A 50 page, pocket sized guide containing charts for file systems, Windows artifacts and more. A sample of the guide content is available for preview:
CF Quick Ref Guide v2.2 (6.9 MiB)
The guide is C6 paper size, portrait and spiral bound on the short edge. The individual pages are laminated for durability. Content wise, it has 12 pages of NTFS including a breakdown of commonly encountered $MFT attributes. There are 3 pages dedicated to FAT including short and long filename breakdowns. exFAT, HFS+ and Ext2/3/4 file systems have been added, spanning 9 pages. The following Windows artifacts have been included: Windows Registry, Internet Explorer, and various Windows Artifacts (total of 11 pages) as well as a page on dates and times and file signatures. ASCII table complete with conversions to Decimal, Hexadecimal, Octal and Binary. The back page has the IACIS first responder guide for handling electronic evidence.
Computer Forensic Examiner – Quick Reference Guide Revision 2.0
The Computer Forensic Examiner Quick Reference Guide, revision 2.0.
A 48 page, pocket sized guide containing charts for file systems, Windows artifacts and more. A sample of the guide content is available for preview:
CF Quick Ref Guide v2.0 (8.9 MiB)
The guide is C6 paper size, portrait and spiral bound on the short edge. The individual pages are laminated for durability. Content wise, it has 12 pages of NTFS including a breakdown of commonly encountered $MFT attributes. There are 3 pages dedicated to FAT including short and long filename breakdowns. exFAT, HFS+ and Ext2/3/4 file systems have been added, spanning 9 pages. The following Windows artifacts have been included: Windows Registry, Internet Explorer, Recycle Bins, Event Logs and Prefetch (total of 11 pages) as well as a page on file signatures. ASCII table complete with conversions to Decimal, Hexadecimal, Octal and Binary. The back page has the IACIS first responder guide for handling electronic evidence.
Computer Forensic Examiner – Quick Reference Guide Revision 1.1
The essential handbook for every Computer Forensic Examiner.
A 26 page, pocket sized guide containing clearly laid out reference material. A sample of the guide content is available for preview:
CF Quick Ref Guide v1.1 (4.7 MiB)
The guide is C6 paper size, portrait and spiral bound on the short edge. The individual pages are laminated for durability. Content wise, it has 12 pages of NTFS including a breakdown of commonly encountered $MFT attributes. There are four pages dedicated to FAT including short and long filename breakdowns. An ASCII table complete with conversions to Decimal, Hexadecimal, Octal and Binary has been included. There are also file location guides for the Windows Registry and Internet Explorer which visually represent exactly where the many, many hive files and index.dat files reside on a Windows system. Finally, the back page has the IACIS first responder guide for handling electronic evidence.