Customer Reviews

Computer Forensics: Investigating Data and Image Files (Ec-Council Press Series: Computer Forensics)

5 star:		(0)
4 star:		(0)
3 star:		(1)
2 star:		(0)
1 star:		(1)

 

 

I'm currently using this book for a graduate digital media forensics course that's part of my Master in Computer Forensics program at George Mason University. I've only done lab #2 (there are 5 labs) from this book so far, but I'm hoping it gets better- at least the book is a start. My class utilizes the Cengage companion website for this book, which provides downloads for the tools to be used in the labs. The tools used in lab 2 are DD (for windows), FTK, Mount image pro, R-Drive & Save-n-Synch. As soon as I installed DD, I had a random .DLL error on both my XP & Win & virtual machines. I tried hunting down the .DLL and adding it to the path and directory and still had issues. Eventually I just tracked down an open source DD for windows and it worked fine. For a lab book, you want all of your tools to be working correctly so you can work on the lab in a successful manor. Rather, I found the lab to be disjointed, frustrating and thin on content. I ended up just poking around with the tools, doing my own thing rather than trying to complete the lab.

This book was branded (not sure if it was created by EC) as being from EC-Council. I do like this group and hold a cert from them as well, so I hold them to a high standard. I'm hoping that the other 2 books from the series I have to use are better than this one has been so far.

I was extremely disappointed when I installed this product and it only sees a portion of the problems in the hard drive. I had a system crash and had to do a system save. Most of my original files and documents were saved but many were lost. I ordered this program thinking it would do the trick and it is worthless. It only sees a small portion of deleted files. If you are trying to save things that are lost, you need to be able to see just about all of them and determine which ones you want to resurrect. With this software, you see about 1/4 to 1/3 of your lost information there by tying your hands of being able to reinstate important files.

I would strongly discourage anyone from purchasing this program. I am now fighting to get my money back and trying to find a better solution to my problems.

Hope this helps others from wasting their money.