Computer evidence collection and preservation - Brown, Christopher L. T. (Course Technology, 2010)