I just saw that the book of the year nominees at the Forensic 4cast Awards include both the X-Ways Practitioner’s Guide and Placing the Suspect Behind the Keyboard. For those that made the nominations, that was very kind. For those that vote for either book, I thank you in advance.
Both books are pretty good. Each gives plenty of tips and information to save you hours of frustration, and more importantly, close some cases. There is a sample chapter of Placing the Suspect Behind the Keyboard here: http://searchsecurity.techtarget.com/feature/Placing-the-Suspect-Behind-the-Keyboard There are reviews at Amazon for both books that may be helpful if you were thinking of getting either book.
If you use X-Ways…..you need the X-Ways Guide, no matter how long you have been using X-Ways. When I asked Eric to help me write this book, he ran with it and did a super job of helping create an easy to read guide to using a very powerful forensic tool. I have more than a ton of emails of how the book converted Encase/FTK primary users into XWF primary users.
As for the Placing the Suspect Behind the Keyboard, that has also helped more than a few examiners close a case with a simple (yet elusive) tip, trick, method, or process that saves hours, if not days, of work. Again, even if you have been doing forensics for a long time, nothing says you can’t learn or relearn something you may not know or have forgotten.
Thanks again to everyone.
Brett
The X-Ways Forensics Practitioner's Guide/2E 