" Computer incident response and forensics team management " Leighton R. Johnson III ; technical editor, Mike Kessler