<?xml version="1.0" encoding="UTF-8"?>
<record
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://www.loc.gov/MARC21/slim http://www.loc.gov/standards/marcxml/schema/MARC21slim.xsd"
    xmlns="http://www.loc.gov/MARC21/slim">

  <leader>00614nam a22001457a 4500</leader>
  <datafield tag="952" ind1=" " ind2=" ">
    <subfield code="0">0</subfield>
    <subfield code="1">0</subfield>
    <subfield code="4">0</subfield>
    <subfield code="7">1</subfield>
    <subfield code="a">EVC</subfield>
    <subfield code="b">EVC</subfield>
    <subfield code="d">2013-06-20</subfield>
    <subfield code="e">Purchased</subfield>
    <subfield code="l">0</subfield>
    <subfield code="o">005.8 JON</subfield>
    <subfield code="p">6412</subfield>
    <subfield code="r">2013-06-20 00:00:00</subfield>
    <subfield code="t">1</subfield>
    <subfield code="w">2019-02-21</subfield>
    <subfield code="y">BK</subfield>
    <subfield code="z">Reference copy:</subfield>
  </datafield>
  <datafield tag="999" ind1=" " ind2=" ">
    <subfield code="c">9091</subfield>
    <subfield code="d">9091</subfield>
  </datafield>
  <datafield tag="020" ind1=" " ind2=" ">
    <subfield code="a">0321240693 (pbk)</subfield>
  </datafield>
  <datafield tag="082" ind1=" " ind2=" ">
    <subfield code="a">005.8</subfield>
    <subfield code="b">JON</subfield>
  </datafield>
  <datafield tag="100" ind1=" " ind2=" ">
    <subfield code="a">Jones, Keith J.</subfield>
    <subfield code="a">Richard Bejtlich</subfield>
    <subfield code="a">Curtis W. Rose</subfield>
  </datafield>
  <datafield tag="245" ind1="1" ind2="0">
    <subfield code="a">Real digital forensics</subfield>
    <subfield code="b">computer security and incident response</subfield>
  </datafield>
  <datafield tag="260" ind1=" " ind2=" ">
    <subfield code="a">Boston</subfield>
    <subfield code="b">Addison-Wesley</subfield>
    <subfield code="c">2009</subfield>
  </datafield>
  <datafield tag="300" ind1=" " ind2=" ">
    <subfield code="a">xxx, 650 p.</subfield>
    <subfield code="b">: ill.</subfield>
    <subfield code="c">; 23 cm.</subfield>
  </datafield>
  <datafield tag="500" ind1=" " ind2=" ">
    <subfield code="a">Includes appendices and index.</subfield>
  </datafield>
  <datafield tag="650" ind1=" " ind2=" ">
    <subfield code="a">Computer crime-Investigation</subfield>
    <subfield code="a">Computer security</subfield>
    <subfield code="v">Network-Based</subfield>
    <subfield code="v">Forensics duplication</subfield>
    <subfield code="v">Forensics analysis</subfield>
    <subfield code="v">Microsoft windows</subfield>
    <subfield code="v">Mobile device forensics</subfield>
    <subfield code="v">Windows</subfield>
    <subfield code="v">Unix</subfield>
    <subfield code="v">Forensics</subfield>
    <subfield code="v">RISE</subfield>
  </datafield>
  <datafield tag="942" ind1=" " ind2=" ">
    <subfield code="c">BK</subfield>
  </datafield>
</record>
