<?xml version="1.0" encoding="UTF-8"?>
<record
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.loc.gov/MARC21/slim http://www.loc.gov/standards/marcxml/schema/MARC21slim.xsd"
    xmlns="http://www.loc.gov/MARC21/slim">

  <leader>02214cam a22003734a 4500</leader>
  <controlfield tag="001">12527454</controlfield>
  <controlfield tag="003">OSt</controlfield>
  <controlfield tag="005">20170803194622.0</controlfield>
  <controlfield tag="008">010906s2002    caua     bf   001 0 eng c</controlfield>
  <datafield tag="010" ind1=" " ind2=" ">
    <subfield code="a">  2001095720</subfield>
  </datafield>
  <datafield tag="020" ind1=" " ind2=" ">
    <subfield code="a">0121631036</subfield>
  </datafield>
  <datafield tag="035" ind1=" " ind2=" ">
    <subfield code="a">(OCoLC)ocm48450441</subfield>
  </datafield>
  <datafield tag="040" ind1=" " ind2=" ">
    <subfield code="a">TOE</subfield>
    <subfield code="c">TOE</subfield>
    <subfield code="d">CUM</subfield>
    <subfield code="d">IQU</subfield>
    <subfield code="d">DLC</subfield>
  </datafield>
  <datafield tag="042" ind1=" " ind2=" ">
    <subfield code="a">pcc</subfield>
  </datafield>
  <datafield tag="050" ind1="0" ind2="0">
    <subfield code="a">HV8079.C65</subfield>
    <subfield code="b">H36 2002</subfield>
  </datafield>
  <datafield tag="082" ind1="0" ind2="0">
    <subfield code="a">363.25968</subfield>
    <subfield code="2">21</subfield>
    <subfield code="b">HAC</subfield>
  </datafield>
  <datafield tag="245" ind1="0" ind2="0">
    <subfield code="a">Handbook of computer crime investigation :</subfield>
    <subfield code="b">forensic tools and technology /</subfield>
    <subfield code="c">edited by Eoghan Casey.</subfield>
  </datafield>
  <datafield tag="246" ind1="3" ind2="0">
    <subfield code="a">Computer crime investigation</subfield>
  </datafield>
  <datafield tag="260" ind1=" " ind2=" ">
    <subfield code="a">San Diego, Calif. :</subfield>
    <subfield code="b">Academic Press,</subfield>
    <subfield code="c">c2002.</subfield>
  </datafield>
  <datafield tag="300" ind1=" " ind2=" ">
    <subfield code="a">xiv, 448 p. :</subfield>
    <subfield code="b">ill. ;</subfield>
    <subfield code="c">24 cm.</subfield>
  </datafield>
  <datafield tag="504" ind1=" " ind2=" ">
    <subfield code="a">Includes bibliographical references and index.</subfield>
  </datafield>
  <datafield tag="505" ind1="0" ind2=" ">
    <subfield code="a">The other side of civil discovery / Troy Larson -- The EnCase process / John Patzakis -- Incident response tools / Steve Romig -- NFR security / Karen Frederick -- Tool testing and analytical methodology / Curt Bryson and Scott Stevens -- Forensic analysis of Windows systems / Bob Sheldon -- UNIX system analysis / Keith Seglem, Mark Luque, and Sigurd Murphy -- Network analysis / Eoghan Casey, Troy Larson, and H. Morrow Long -- Wireless network analysis / K. Edward Gibbs and David F. Clark -- Embedded systems analysis / Ronald van der Knijff -- Homicide and child pornography / J.J. McLean -- Investigating internet gambling / Todd G. Shipley -- Computer intrusions / Steve Romig.</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="0">
    <subfield code="a">Computer crimes</subfield>
    <subfield code="x">Investigation</subfield>
    <subfield code="v">Handbooks, manuals, etc.</subfield>
    <subfield code="9">41931</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="0">
    <subfield code="a">Evidence, Criminal</subfield>
    <subfield code="v">Handbooks, manuals, etc.</subfield>
    <subfield code="9">58412</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2="0">
    <subfield code="a">Forensic sciences</subfield>
    <subfield code="v">Handbooks, manuals, etc.</subfield>
    <subfield code="9">58413</subfield>
  </datafield>
  <datafield tag="700" ind1="1" ind2=" ">
    <subfield code="a">Casey, Eoghan.</subfield>
    <subfield code="9">41673</subfield>
  </datafield>
  <datafield tag="856" ind1="4" ind2="2">
    <subfield code="3">Publisher description</subfield>
    <subfield code="u">http://www.loc.gov/catdir/description/els031/2001095720.html</subfield>
  </datafield>
  <datafield tag="856" ind1="4" ind2="1">
    <subfield code="3">Table of contents</subfield>
    <subfield code="u">http://www.loc.gov/catdir/toc/els031/2001095720.html</subfield>
  </datafield>
  <datafield tag="856" ind1="4" ind2="2">
    <subfield code="3">Book review (E-STREAMS)</subfield>
    <subfield code="u">http://www.e-streams.com/es0509/es0509_2079.htm</subfield>
  </datafield>
  <datafield tag="906" ind1=" " ind2=" ">
    <subfield code="a">7</subfield>
    <subfield code="b">cbc</subfield>
    <subfield code="c">pccadap</subfield>
    <subfield code="d">2</subfield>
    <subfield code="e">ncip</subfield>
    <subfield code="f">20</subfield>
    <subfield code="g">y-gencatlg</subfield>
  </datafield>
  <datafield tag="942" ind1=" " ind2=" ">
    <subfield code="2">ddc</subfield>
    <subfield code="c">BOOK</subfield>
  </datafield>
  <datafield tag="999" ind1=" " ind2=" ">
    <subfield code="c">40397</subfield>
    <subfield code="d">310017</subfield>
  </datafield>
  <datafield tag="952" ind1=" " ind2=" ">
    <subfield code="1">0</subfield>
    <subfield code="2">2017-08-03</subfield>
    <subfield code="4">0</subfield>
    <subfield code="7">0</subfield>
    <subfield code="a">363.25968 HAC</subfield>
    <subfield code="d">2017-08-03</subfield>
    <subfield code="h">CL</subfield>
    <subfield code="i">00656077</subfield>
    <subfield code="m">CL</subfield>
    <subfield code="r">2017-08-03 00:00:00</subfield>
    <subfield code="t">BOOK</subfield>
    <subfield code="w">ddc</subfield>
    <subfield code="y">0</subfield>
  </datafield>
  <datafield tag="952" ind1=" " ind2=" ">
    <subfield code="1">0</subfield>
    <subfield code="2">2017-08-03</subfield>
    <subfield code="4">0</subfield>
    <subfield code="7">0</subfield>
    <subfield code="a">363.25968 HAC</subfield>
    <subfield code="d">2017-08-03</subfield>
    <subfield code="h">CL</subfield>
    <subfield code="i">00656078</subfield>
    <subfield code="m">CL</subfield>
    <subfield code="r">2017-08-03 00:00:00</subfield>
    <subfield code="t">BOOK</subfield>
    <subfield code="w">ddc</subfield>
    <subfield code="y">0</subfield>
  </datafield>
  <datafield tag="952" ind1=" " ind2=" ">
    <subfield code="1">0</subfield>
    <subfield code="2">2017-08-03</subfield>
    <subfield code="4">0</subfield>
    <subfield code="7">0</subfield>
    <subfield code="a">363.25968 HAC</subfield>
    <subfield code="d">2017-08-03</subfield>
    <subfield code="h">CL</subfield>
    <subfield code="i">00656079</subfield>
    <subfield code="m">CL</subfield>
    <subfield code="r">2017-08-03 00:00:00</subfield>
    <subfield code="t">BOOK</subfield>
    <subfield code="w">ddc</subfield>
    <subfield code="y">0</subfield>
  </datafield>
</record>
