Incident response & computer forensics - Prosise, Chris (McGraw-Hill/Osborne, 2003)